{"id":"CVE-2012-5671","details":"Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to \"warn control = dkim_disable_verify,\" allows remote attackers to execute arbitrary code via an email from a malicious DNS server.","modified":"2026-04-10T03:42:34.636253Z","published":"2012-10-31T16:55:06Z","related":["openSUSE-SU-2024:10017-1"],"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/51098"},{"type":"ADVISORY","url":"http://secunia.com/advisories/51115"},{"type":"ADVISORY","url":"http://secunia.com/advisories/51153"},{"type":"ADVISORY","url":"http://secunia.com/advisories/51155"},{"type":"ADVISORY","url":"http://www.debian.org/security/2012/dsa-2566"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-1618-1"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091664.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090900.html"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090963.html"},{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00018.html"},{"type":"WEB","url":"http://osvdb.org/86616"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2012/10/26/5"},{"type":"WEB","url":"http://www.securityfocus.com/bid/56285"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79615"},{"type":"WEB","url":"https://lists.exim.org/lurker/message/20121026.080330.74b9147b.en.html"}],"schema_version":"1.7.5"}