CVE Vulnerability

CVE-2019-15502

The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE).

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://r4p3.net/threads/teamkilled-new-teamspeak-crash.8144/ Exploit Third Party Advisory
https://www.youtube.com/watch?v=PlVbPIs75D4 Exploit Third Party Advisory
https://forum.teamspeak.com/threads/141134-Release-TeamSpeak-Client-3-3-2 Release Notes Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:teamspeak:teamspeak:*:*:*:*:*:*:*:*
Information

Published : 2019-08-29 04:15

Updated : 2020-08-24 05:37

NVD link : CVE-2019-15502

Mitre link : CVE-2019-15502

Products Affected
No products.
CWE
NVD-CWE-noinfo