CVE-2010-4840

CVE-2010-4840 describes multiple buffer overflows in the Syslog server component of ManageEngine EventLog Analyzer 6.1. This vulnerability allows unauthenticated remote attackers to trigger a denial of service by crashing the SysEvttCol.exe process, or potentially achieve arbitrary code execution, by sending a crafted, long Syslog PRI message header to UDP ports 513 or 514. With a CVSS score of 7.5, this high-severity vulnerability is easily exploitable over the network with low attack complexity, posing risks of partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.