JVNDB-2014-000130

Multiple Cybozu products vulnerable to buffer overflow

Multiple products provided by Cybozu, Inc. contain a buffer overflow vulnerability (CWE-119).

Masaaki Chida of GREE, Inc. reported this vulnerability to the developer.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Cybozu, Inc.

• Cybozu Office 10.0.2 and earlier
• Cybozu Dezie 8.1.0 and earlier
• Cybozu Mailwise 5.1.3 and earlier

A remote attacker may cause a denial-of-service (DoS) or execute arbitrary code.

[Update the Software]
Update to the latest version according to the information provided by the developer.

Cybozu, Inc.

• Cybozu : Cybozu, Inc. website (in Japanese)

1. Buffer Errors(CWE-119) [IPA Evaluation]

1. CVE-2014-5314

1. JVN : JVN#14691234
2. National Vulnerability Database (NVD) : CVE-2014-5314
3. IPA SECURITY ALERTS : Security Alert for Multiple Cybozu products vulnerable to buffer overflow (JVN#14691234) (in Japanese)

• [2014/11/11]
    Web page was published
  [2014/11/25]
    References : Content was added