Multiple Cybozu products CVE-2014-5314 Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	71057
Class:	Boundary Condition Error
CVE:	CVE-2014-5314
Remote:	Yes
Local:	No
Published:	Nov 11 2014 12:00AM
Updated:	Nov 11 2014 12:00AM
Credit:	Masaaki Chida of GREE, Inc.
Vulnerable:	Cybozu Office 9.3 Cybozu Office 8.1.6 Cybozu Office 9.3.1 Cybozu Office 9 Cybozu Office 8.1.1 Cybozu Office 8 Cybozu Office 7 Cybozu Office 6.5 Cybozu Office 6 Cybozu Office 10.0.2 Cybozu Mailwise 5.0.4 Cybozu Mailwise 4.0.6 Cybozu Mailwise 5.1.3 Cybozu Mailwise 5.0.6 Cybozu Mailwise 5.0.5 Cybozu Mailwise 5 Cybozu Mailwise 4 Cybozu Mailwise 3.1 Cybozu Mailwise 3 Cybozu Dezie 8.0.7 Cybozu Dezie 8.1.0 Cybozu Dezie 8.0.6 Cybozu Dezie 8.0.5 Cybozu Dezie 8.0.4 Cybozu Dezie 8.0.3 Cybozu Dezie 8.0.2 Cybozu Dezie 8.0.1 Cybozu Dezie 8.0.0 Cybozu Dezie 8 Cybozu Dezie 7 Cybozu Dezie 6.1 Cybozu Dezie 6
Not Vulnerable:

Multiple Cybozu products CVE-2014-5314 Unspecified Buffer Overflow Vulnerability

Multiple Cybozu products are prone to an unspecified buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

The following products are affected:

Cybozu Office 10.0.2 and prior
Cybozu Mailwise 5.1.3 and prior
Cybozu Dezie 8.1.0 and prior

Multiple Cybozu products CVE-2014-5314 Unspecified Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cybozu products CVE-2014-5314 Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.