CVE-2014-2957

The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From…

published September 4, 2014

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05285 · 92.5th percentile
Published
2014-09-04T17:00Z
EPSS history
Timeline
  • 04 SEP 17:00Z
    The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From…
    cvelistv5