CVE-2014-7221

NONE EPSS 95.4%

Published Jan 8, 20188y ago · Modified Jun 17, 20262w ago

Published Jan 8, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing [img]//http:// substrings.

Threat Intelligence

EPSS Exploit Probability

95.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 1

Vendor	Product	Version	Range
teamspeak	teamspeak3	*	≤3.0.14

References 5

r4p3.net http://r4p3.net/forum/reverse-engineering/38/teamspeak-3-exploit-bb-code-freeze-crash-not-responding/905

Broken Link
r4p3.net http://r4p3.net/public/ts3bbcodefreeze.txt

Broken Link
securityfocus.com http://www.securityfocus.com/bid/70219

Third Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/96889

Third Party AdvisoryVDB Entry
packetstormsecurity.com https://packetstormsecurity.com/files/128571/TeamSpeak-Client-3.0.14-Buffer-Overflow.html

ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.