CVE-2014-5314 Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.
HighCVSS 9.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cybozu office | <= 10.0.2 | No fix listed |
| cybozu office | = 9.0 | No fix listed |
| cybozu dezie | <= 8.1.0 | No fix listed |
| cybozu mailwise | <= 5.1.3 | No fix listed |
| cybozu mailwise | = 4.0 | No fix listed |
References
- JVN#14691234 third-party-advisory
- JVNDB-2014-000130 third-party-advisory
- 62248 third-party-advisory
- cs.cybozu.co.jp vendor-advisory