CVE-2015-7686

Name of the Vulnerable Software and Affected Versions Email-Address module versions 1.908 and earlier

Description The issue allows remote attackers to cause a denial of service due to high CPU consumption. This can be achieved by sending a crafted string containing a list of e-mail addresses in conjunction with parenthesis characters that can be associated with nested comments.

Recommendations For Email-Address module versions 1.908 and earlier, consider updating to a version later than 1.908 to resolve the issue. As a temporary workaround, consider restricting the use of nested comments in conjunction with parenthesis characters to minimize the risk of exploitation.