Lucene search

K
jvnJapan Vulnerability NotesJVN:14691234
HistoryNov 11, 2014 - 12:00 a.m.

JVN#14691234: Multiple Cybozu products vulnerable to buffer overflow

2014-11-1100:00:00
Japan Vulnerability Notes
jvn.jp
13

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

0.049

Percentile

92.8%

Multiple products provided by Cybozu, Inc. contain a buffer overflow vulnerability (CWE-119).

Impact

A remote attacker may cause a denial-of-service (DoS) or execute arbitrary code.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Cybozu Office 10.0.2 and earlier
  • Cybozu Mailwise 5.1.3 and earlier
  • Cybozu Dezie 8.1.0 and earlier

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

0.049

Percentile

92.8%

Related for JVN:14691234