Huawei eSpace Desktop eSpace Meeting ActiveX Control CVE-2014-9418 Memory Overflow Vulnerability

Bugtraq ID:	73353
Class:	Design Error
CVE:	CVE-2014-9418
Remote:	No
Local:	Yes
Published:	Mar 20 2015 12:00AM
Updated:	Mar 20 2015 12:00AM
Credit:	Huawei
Vulnerable:	Huawei eSpace UC V200R002C02 Huawei eSpace UC V200R002C01 Huawei eSpace UC V200R002 Huawei eSpace UC V200R001C50 Huawei eSpace UC V200R001 Huawei eSpace UC V100R002C00 Huawei eSpace UC V100R002 Huawei eSpace UC V100R001
Not Vulnerable:	Huawei eSpace desktop V200R001C03

Huawei eSpace Desktop eSpace Meeting ActiveX Control CVE-2014-9418 Memory Overflow Vulnerability

The eSpace Meeting ActiveX Control for Huawei eSpace Desktop is prone to a memory overflow vulnerability.

A local attacker can exploit this issue to crash the application (typically Internet Explorer), denying service to legitimate users.

Huawei eSpace Desktop eSpace Meeting ActiveX Control CVE-2014-9418 Memory Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Huawei eSpace Desktop eSpace Meeting ActiveX Control CVE-2014-9418 Memory Overflow Vulnerability

References:

• eSpace Desktop Product Page (Huawei)
  
• Huawei Home Page (Huawei Technologies)
  
• Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product (Huawei)