CVE-2014-2957

Published: Sep 4, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand_string function.

Affected (51)

Products: Exim: Exim

Exim

1 product

Exim

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Exim Exim	Up to 4.82
Exim Exim	Version 4.00
Exim Exim	Version 4.01
Exim Exim	Version 4.02
Exim Exim	Version 4.03
Exim Exim	Version 4.04
Exim Exim	Version 4.05
Exim Exim	Version 4.10
Exim Exim	Version 4.11
Exim Exim	Version 4.12
Exim Exim	Version 4.14
Exim Exim	Version 4.20
Exim Exim	Version 4.21
Exim Exim	Version 4.22
Exim Exim	Version 4.23
Exim Exim	Version 4.24
Exim Exim	Version 4.30
Exim Exim	Version 4.31
Exim Exim	Version 4.32
Exim Exim	Version 4.33
Exim Exim	Version 4.34
Exim Exim	Version 4.40
Exim Exim	Version 4.41
Exim Exim	Version 4.42
Exim Exim	Version 4.43
Exim Exim	Version 4.44
Exim Exim	Version 4.50
Exim Exim	Version 4.51
Exim Exim	Version 4.52
Exim Exim	Version 4.53
Exim Exim	Version 4.54
Exim Exim	Version 4.60
Exim Exim	Version 4.61
Exim Exim	Version 4.62
Exim Exim	Version 4.63
Exim Exim	Version 4.64
Exim Exim	Version 4.65
Exim Exim	Version 4.66
Exim Exim	Version 4.67
Exim Exim	Version 4.68
Exim Exim	Version 4.69
Exim Exim	Version 4.70
Exim Exim	Version 4.71
Exim Exim	Version 4.72
Exim Exim	Version 4.73
Exim Exim	Version 4.74
Exim Exim	Version 4.75
Exim Exim	Version 4.76
Exim Exim	Version 4.77
Exim Exim	Version 4.80.1
Exim Exim	Version 4.80