TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
BID:70219
CVE-2014-7221 | CVE-2014-7222 |Info
TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 70219 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-7221 CVE-2014-7222 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 02 2014 12:00AM |
| Updated: | Oct 02 2014 12:00AM |
| Credit: | SpyEye & Christian Galeone |
| Vulnerable: |
Teamspeak Teamspeak 3.0.14 |
| Not Vulnerable: | |
Discussion
TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
TeamSpeak Client is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
TeamSpeak Client 3.0.14 is vulnerable; other versions may also be affected.
TeamSpeak Client is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
TeamSpeak Client 3.0.14 is vulnerable; other versions may also be affected.
Exploit / POC
TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
The following example URI is available:
[img][img]//http://www.example.com/templates/teamspeak_v3/images/blank.gif[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser75.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7a.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7b.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser75.png?ver=4.6.0.24[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7z.png?ver=4.6.0.28[/img][/img]
The following example URI is available:
[img][img]//http://www.example.com/templates/teamspeak_v3/images/blank.gif[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser75.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7a.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7b.png?ver=4.6.0.28[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser75.png?ver=4.6.0.24[/img][/img] [img][img]//http://i.answers.example.com/static/images/defaultuser7z.png?ver=4.6.0.28[/img][/img]
Solution / Fix
TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
TeamSpeak Client Multiple Buffer Overflow Vulnerabilities
References:
References:
- Teamspeak Homepage (Teamspeak)
- Vendor Homepage (Teamspeak Systems)