CVE-2014-7216 - CVE House
Back to Database
Status published Critical CVE-2014-7216

Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier...

Vulnerability Description

Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-7216

Credits & Attribution

No credits recorded in the NVD database.

References

More from yahoo

View All →
CVE-2022-24827
SQL Injection in elide-datastore-aggregation
High 8.1
CVE-2020-5289
Read permissions not enforced for client provided filter expressions in Elide http client
Medium 6.8
CVE-2019-16769
Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
Medium 4.2
CVE-2014-5881
The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android...
Medium 5.4
CVE-2013-6853
Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin...
Medium 4.3

Affected Vendor

Affected Software

messenger
Vulnerable Versions:
0

Timeline

Official Publish: September 11th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.