git://git.exim.org / exim.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 69aca2f) | patch
SECURITY: DMARC uses From header untrusted data exim-4_82_1
authorTodd Lyons <tlyons@exim.org>
Mon, 26 May 2014 19:14:16 +0000 (12:14 -0700)
committerTodd Lyons <tlyons@exim.org>
Mon, 26 May 2014 19:14:16 +0000 (12:14 -0700)
commit5b7a7c051c9ab9ee7c924a611f90ef2be03e0ad0
tree18486f503facc9bf41244f63ab08da5cfb684d44tree | snapshot
parent69aca2feaca1ebbc55c6f1adaee4738dc328ae90commit | diff
SECURITY: DMARC uses From header untrusted data

CVE-2014-2957

To find the sending domain, expand_string() was used to directly parse
  the contents of the From header. This passes untrusted data directly
  into an internal function. Convert to use standard internal parsing
  functions.
src/src/dmarc.c diff | blob | history
Master Exim source repository