NVD

Id
34645  
Name
CVE-2014-7216  
Description
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-11  
Modified Date
2016-12-21  
Seq
2014-7216  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178617 34645 CVE-2014-7216 http://packetstormsecurity.com/files/133443/Yahoo-Messenger-11.5.0.228-Buffer-Overflow.html  View
178618 34645 CVE-2014-7216 20150907 [CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow  View
178619 34645 CVE-2014-7216 20150903 [CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow  View
178620 34645 CVE-2014-7216 1033544  View
178621 34645 CVE-2014-7216 https://hackerone.com/reports/10767  View
178622 34645 CVE-2014-7216 https://www.rcesecurity.com/2015/09/cve-2014-7216-a-journey-through-yahoos-bug-bounty-program/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19249 JVNDB-2014-008126 Yahoo! Messenger におけるスタックベースのバッファオーバーフローの脆弱性 Yahoo! Messenger には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-7216 74509 CVE-2014-7216 34645 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008126.html 2014-05-03 2015-09-15 View