CVE-2019-15502

Опубликовано: 29 авг. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE).

Ссылки

https://forum.teamspeak.com/threads/141134-Release-TeamSpeak-Client-3-3-2
Release Notes
Vendor Advisory
https://r4p3.net/threads/teamkilled-new-teamspeak-crash.8144/
Exploit
Third Party Advisory
https://www.youtube.com/watch?v=PlVbPIs75D4
Exploit
Third Party Advisory
https://forum.teamspeak.com/threads/141134-Release-TeamSpeak-Client-3-3-2
Release Notes
Vendor Advisory
https://r4p3.net/threads/teamkilled-new-teamspeak-crash.8144/
Exploit
Third Party Advisory
https://www.youtube.com/watch?v=PlVbPIs75D4
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:teamspeak:teamspeak:*:*:*:*:*:*:*:*

Версия до 3.3.2 (исключая)

EPSS

Процентиль: 70%

0.00642

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-15502

CVSS3: 7.5

debian

больше 6 лет назад

The TeamSpeak client before 3.3.2 allows remote servers to trigger a c ...

GHSA-7hh5-c328-f5rx

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 70%

0.00642

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo