CVE-2014-5314

Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages.

Score

CVSS 2.0 9.0 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2014-11-24

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Dezie (Cybozu)
• Mailwise (Cybozu)
• Office (Cybozu)

References

• http://jvn.jp/en/jp/JVN14691234/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000130
• http://secunia.com/advisories/62248
• https://cs.cybozu.co.jp/2014/1110-2.html