CVE-2014-2957

EPSS 1.8%

發布日:2014/9/4修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-2957

描述

The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.

受影響套件(1)

Debian/exim4from 0, < 4.82.1-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-2957