CVE-2014-2957

CVE-2014-2957 describes a remote code execution vulnerability in Exim versions prior to 4.82.1, specifically within the dmarc_process function when EXPERIMENTAL_DMARC is enabled. An attacker can exploit this by crafting a malicious From header in an email, which is then processed by the expand_string function. This vulnerability carries a CVSS score of 6.8, indicating a medium severity with potential for partial confidentiality, integrity, and availability impact, requiring medium attack complexity but no authentication. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.