CVE-2014-7216 Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo messenger | <= 11.5.0.228 | No fix listed |
References
- packetstormsecurity.com
- 20150907 [CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow mailing-list
- 20150903 [CVE-2014-7216] Yahoo! Messenger emoticons.xml Multiple Key Value Handling Local Buffer Overflow mailing-list
- 1033544 vdb-entry
- hackerone.com
- www.rcesecurity.com exploit