Vulnerabilities > Teamspeak
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-29 | CVE-2019-15502 | Unspecified vulnerability in Teamspeak The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE). | 5.0 |
| 2019-04-19 | CVE-2019-11351 | Untrusted Search Path vulnerability in Teamspeak TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework. | 9.3 |
| 2018-01-08 | CVE-2014-7222 | Improper Input Validation vulnerability in Teamspeak Teamspeak3 Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \\ (backslash) characters, a digit, a \ (backslash) character, and "z" in a series of nested img BBCODE tags. | 4.0 |
| 2018-01-08 | CVE-2014-7221 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Teamspeak Teamspeak3 TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing [img]//http:// substrings. | 4.0 |
| 2017-07-06 | CVE-2017-8290 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Teamspeak Client and Teamspeak Server A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/2016 09:48:33), it enables the users to Crash any WINDOWS Client that clicked into a Vulnerable Channel of a TeamSpeak Server. | 5.0 |
| 2017-06-27 | CVE-2017-9982 | Improper Input Validation vulnerability in Teamspeak Client 3.0.19 TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the ᗪ Unicode character followed by the ༿ Unicode character. | 5.0 |
| 2010-10-20 | CVE-2010-3383 | Unspecified vulnerability in Teamspeak 2.0.32 The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. local teamspeak | 6.9 |
| 2007-08-25 | CVE-2007-4530 | Scripts Multiple Cross-Site Scripting vulnerability in Teamspeak web Server 2.0.20.1 Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HTML via (1) the error_text parameter to error_box.html or (2) the ok_title parameter to ok_box.html. network teamspeak | 4.3 |
| 2007-08-25 | CVE-2007-4529 | Privilege Escalation vulnerability in Teamspeak web Server 2.0.20.1 The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users certain privileges, resulting in a privilege set that extends beyond that ServerAdmin's own servers, as demonstrated by the (1) AdminAddServer, (2) AdminDeleteServer, (3) AdminStartServer, and (4) AdminStopServer privileges; and administration of arbitrary virtual servers via a request to a .tscmd URI with a modified serverid parameter, as demonstrated by (a) add_server.tscmd, (b) ask_delete_server.tscmd, (c) start_server.tscmd, and (d) stop_server.tscmd. network teamspeak | 8.5 |
| 2007-07-24 | CVE-2007-3956 | Remote Denial Of Service vulnerability in Teamspeak web Server 2.0 TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attackers to cause a denial of service (CPU and memory consumption) via long username and password parameters in a request to login.tscmd on TCP port 14534. | 7.8 |