CVE-2014-2972

Published: Sep 4, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Affected (52)

Products: Exim: Exim

Exim

1 product

Exim

Configuration A

52 vulnerable

Vulnerable Software	Affected Versions
Exim Exim	Up to 4.82.1
Exim Exim	Version 4.00
Exim Exim	Version 4.01
Exim Exim	Version 4.02
Exim Exim	Version 4.03
Exim Exim	Version 4.04
Exim Exim	Version 4.05
Exim Exim	Version 4.10
Exim Exim	Version 4.11
Exim Exim	Version 4.12
Exim Exim	Version 4.14
Exim Exim	Version 4.20
Exim Exim	Version 4.21
Exim Exim	Version 4.22
Exim Exim	Version 4.23
Exim Exim	Version 4.24
Exim Exim	Version 4.30
Exim Exim	Version 4.31
Exim Exim	Version 4.32
Exim Exim	Version 4.33
Exim Exim	Version 4.34
Exim Exim	Version 4.40
Exim Exim	Version 4.41
Exim Exim	Version 4.42
Exim Exim	Version 4.43
Exim Exim	Version 4.44
Exim Exim	Version 4.50
Exim Exim	Version 4.51
Exim Exim	Version 4.52
Exim Exim	Version 4.53
Exim Exim	Version 4.54
Exim Exim	Version 4.60
Exim Exim	Version 4.61
Exim Exim	Version 4.62
Exim Exim	Version 4.63
Exim Exim	Version 4.64
Exim Exim	Version 4.65
Exim Exim	Version 4.66
Exim Exim	Version 4.67
Exim Exim	Version 4.68
Exim Exim	Version 4.69
Exim Exim	Version 4.70
Exim Exim	Version 4.71
Exim Exim	Version 4.72
Exim Exim	Version 4.73
Exim Exim	Version 4.74
Exim Exim	Version 4.75
Exim Exim	Version 4.76
Exim Exim	Version 4.77
Exim Exim	Version 4.80.1
Exim Exim	Version 4.80
Exim Exim	Version 4.82