There are two stack based overflows in exim 3.35 reported by George Guninski.
Actually, these are already fixed in fc2.