CVE-2014-7222

NONE EPSS 95.4%

Published Jan 8, 20188y ago · Modified Jun 17, 20262w ago

Published Jan 8, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \\ (backslash) characters, a digit, a \ (backslash) character, and "z" in a series of nested img BBCODE tags.

Threat Intelligence

EPSS Exploit Probability

95.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 1

Vendor	Product	Version	Range
teamspeak	teamspeak3	*	≤3.0.14

References 5

packetstormsecurity.com http://packetstormsecurity.com/files/128571/TeamSpeak-Client-3.0.14-Buffer-Overflow.html

ExploitThird Party AdvisoryVDB Entry
r4p3.net http://r4p3.net/forum/reverse-engineering/38/teamspeak-3-exploit-bb-code-freeze-crash-not-responding/905/

Broken Link
r4p3.net http://r4p3.net/public/ts3bbcodefreeze.txt

Broken Link
securityfocus.com http://www.securityfocus.com/bid/70219

Third Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/96890

Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.