Sign-up

ID

VAR-201412-0107


CVE

CVE-2014-9415


TITLE

Huawei eSpace Desktop Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-007408

DESCRIPTION

Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QES file. Huawei eSpace Desktop is a unified communications PC client developed by Huawei. Huawei eSpace Desktop is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to cause a denial-of-service condition. It provides instant messaging, status presentation, personal address book, VoIP call, video call, file transfer, voice conference, Business applications such as data conferencing

Trust: 2.52

sources: NVD: CVE-2014-9415 // JVNDB: JVNDB-2014-007408 // CNVD: CNVD-2015-00027 // BID: 73351 // VULHUB: VHN-77360

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2015-00027

AFFECTED PRODUCTS

vendor:huaweimodel:espace desktopscope:lteversion:v100r001c03

Trust: 1.0

vendor:huaweimodel:espace desktopscope:ltversion:v100r001c03

Trust: 0.8

vendor:huaweimodel:espace desktop <v100r001c03scope: - version: -

Trust: 0.6

vendor:huaweimodel:espace desktopscope:eqversion:v100r001c03

Trust: 0.6

vendor:huaweimodel:espace desktop v100r001c03scope: - version: -

Trust: 0.3

sources: CNVD: CNVD-2015-00027 // BID: 73351 // JVNDB: JVNDB-2014-007408 // CNNVD: CNNVD-201412-544 // NVD: CVE-2014-9415

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-9415
value: LOW

Trust: 1.0

NVD: CVE-2014-9415
value: LOW

Trust: 0.8

CNVD: CNVD-2015-00027
value: LOW

Trust: 0.6

CNNVD: CNNVD-201412-544
value: LOW

Trust: 0.6

VULHUB: VHN-77360
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2014-9415
severity: LOW
baseScore: 1.9
vectorString: AV:L/AC:M/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2015-00027
severity: LOW
baseScore: 1.9
vectorString: AV:L/AC:M/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-77360
severity: LOW
baseScore: 1.9
vectorString: AV:L/AC:M/AU:N/C:N/I:N/A:P
accessVector: LOCAL
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 3.4
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2015-00027 // VULHUB: VHN-77360 // JVNDB: JVNDB-2014-007408 // CNNVD: CNNVD-201412-544 // NVD: CVE-2014-9415

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-77360 // JVNDB: JVNDB-2014-007408 // NVD: CVE-2014-9415

THREAT TYPE

local

Trust: 0.9

sources: BID: 73351 // CNNVD: CNNVD-201412-544

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201412-544

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-007408

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-77360

PATCH
title:Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Productyurl:http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm
Trust: 0.8
title:Huawei eSpace Desktop V100R001C03 Patch for Denial of Service Vulnerability (CNVD-2015-00027)url:https://www.cnvd.org.cn/patchInfo/show/53585
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2015-00027 // 
            
            
            
            JVNDB: JVNDB-2014-007408

EXTERNAL IDS
db:NVDid:CVE-2014-9415
Trust: 3.4
db:PACKETSTORMid:152965
Trust: 1.7
db:JVNDBid:JVNDB-2014-007408
Trust: 0.8
db:CNNVDid:CNNVD-201412-544
Trust: 0.7
db:CNVDid:CNVD-2015-00027
Trust: 0.6
db:BIDid:73351
Trust: 0.4
db:VULHUBid:VHN-77360
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2015-00027 // 
            
            
            
            VULHUB: VHN-77360 // 
            
            
            
            BID: 73351 // 
            
            
            
            JVNDB: JVNDB-2014-007408 // 
            
            
            
            CNNVD: CNNVD-201412-544 // 
            
            
            
            NVD: CVE-2014-9415

REFERENCES
url:http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm
Trust: 2.3
url:http://packetstormsecurity.com/files/152965/huawei-espace-1.1.11.103-unicode-stack-buffer-overflow.html
Trust: 2.3
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-9415
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-9415
Trust: 0.8
url:http://enterprise.huawei.com/en/products/coll-communication/union-comuni/uc/en_desktop.htm
Trust: 0.3
url:http://www.huawei.com
Trust: 0.3
url:http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/archive/hw-406589.htm
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2015-00027 // 
            
            
            
            VULHUB: VHN-77360 // 
            
            
            
            BID: 73351 // 
            
            
            
            JVNDB: JVNDB-2014-007408 // 
            
            
            
            CNNVD: CNNVD-201412-544 // 
            
            
            
            NVD: CVE-2014-9415

CREDITS
LiquidWorm
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201412-544

SOURCES
db:CNVDid:CNVD-2015-00027
db:VULHUBid:VHN-77360
db:BIDid:73351
db:JVNDBid:JVNDB-2014-007408
db:CNNVDid:CNNVD-201412-544
db:NVDid:CVE-2014-9415

LAST UPDATE DATE
2025-04-13T23:31:36.670000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2015-00027date:2015-01-05T00:00:00
db:VULHUBid:VHN-77360date:2019-05-20T00:00:00
db:BIDid:73351date:2015-03-20T00:00:00
db:JVNDBid:JVNDB-2014-007408date:2015-01-05T00:00:00
db:CNNVDid:CNNVD-201412-544date:2019-05-21T00:00:00
db:NVDid:CVE-2014-9415date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CNVDid:CNVD-2015-00027date:2015-01-05T00:00:00
db:VULHUBid:VHN-77360date:2014-12-24T00:00:00
db:BIDid:73351date:2015-03-20T00:00:00
db:JVNDBid:JVNDB-2014-007408date:2015-01-05T00:00:00
db:CNNVDid:CNNVD-201412-544date:2014-12-31T00:00:00
db:NVDid:CVE-2014-9415date:2014-12-24T18:59:12.543