{"cvss":0.0,"datePublished":"2013-02-21T00:00:00Z","dateUpdated":"2013-02-21T00:00:00Z","description":"Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to \"warn control = dkim_disable_verify,\" allows remote attackers to execute arbitrary code via an email from a malicious DNS server.","dueDate":"","id":"CVE-2012-5671","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Exim","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Exim Exim Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Exim"}