Stack-Based Buffer Overflow in Yahoo! Messenger by Yahoo
CVE-2014-7216

Currently unrated

Key Information:

Vendor

Yahoo

Status
Messenger
Vendor
CVE Published:
11 September 2015

What is CVE-2014-7216?

Yahoo! Messenger versions up to 11.5.0.228 are susceptible to multiple stack-based buffer overflow vulnerabilities. These flaws can be exploited by remote attackers through specially crafted inputs in the emoticons.xml file, notably using the shortcut or title keys. Successful exploitation could lead to a denial of service by crashing the application, and it may also allow attackers to execute arbitrary code, posing significant security risks to users.

References

https://www.rcesecurity.com/2015/09/cve-2014-7216-a-journ...
x_refsource_MISC
https://hackerone.com/reports/10767
x_refsource_MISC
http://www.securityfocus.com/archive/1/536390/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.