4 matches found
CVE-2014-2957
The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...
CVE-2014-2957
The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...
CVE-2014-2957
The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...
CVE-2014-2957
The CVE-2014-2957 entry concerns Exim (before 4.82.1). When EXPERIMENTAL_DMARC is enabled, the dmarc_process function in dmarc.c can be triggered via the From header in an email, passing data to expand_string and allowing remote code execution. This is the concrete vulnerability described in mult...