Stack-based buffer overflow in Exim 3.35 and other versions before 4 when the sender_verify option is true allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.