Firetruck

CVE-2019-10149

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
eximexim / exim4.92affected