Lucene search

JpcertCVE-2014-5314

HistoryNov 24, 2014 - 2:59 a.m.

CVE-2014-5314

2014-11-2402:59:00

CWE-119

jpcert

web.nvd.nist.gov

cve-2014-5314

buffer overflow

cybozu office

mailwise

dezie

remote code execution

email security

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.049

Percentile

92.8%

JSON

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.

Affected configurations

Nvd

Node

cybozuofficeRange≤10.0.2

cybozuofficeMatch9.0

Node

cybozudezieRange≤8.1.0

Node

cybozumailwiseRange≤5.1.3

cybozumailwiseMatch4.0

VendorProductVersionCPE
cybozuoffice*cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*
cybozuoffice9.0cpe:2.3:a:cybozu:office:9.0:*:*:*:*:*:*:*
cybozudezie*cpe:2.3:a:cybozu:dezie:*:*:*:*:*:*:*:*
cybozumailwise*cpe:2.3:a:cybozu:mailwise:*:*:*:*:*:*:*:*
cybozumailwise4.0cpe:2.3:a:cybozu:mailwise:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cybozu	office	*	cpe:2.3:a:cybozu:office::::::::
cybozu	office	9.0	cpe:2.3:a:cybozu:office:9.0:::::::*
cybozu	dezie	*	cpe:2.3:a:cybozu:dezie::::::::
cybozu	mailwise	*	cpe:2.3:a:cybozu:mailwise::::::::
cybozu	mailwise	4.0	cpe:2.3:a:cybozu:mailwise:4.0:::::::*

References

jvn.jp/en/jp/JVN14691234/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000130

secunia.com/advisories/62248

cs.cybozu.co.jp/2014/1110-2.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.049

Percentile

92.8%

JSON

Related for CVE-2014-5314