Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities:

1. The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. (Vulnerability ID: HWPSIRT-2014-1151)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-9415.

2. DLL hijacking vulnerability (mfc71enu.dll & mfc71loc.dll). (Vulnerability ID: HWPSIRT-2014-1153)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-9416.

3. DLL hijacking vulnerability (tcapi.dll & airpcap.dll). (Vulnerability ID: HWPSIRT-2014-1154)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-9416.The CVE ID is same with HWPSIRT-2014-1153.

4. Upon the import of invalid image files in eSpace Meeting, the system exits unexpectedly. (Vulnerability ID: HWPSIRT-2014-1156)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-9417.

5. The eSpace Meeting ActiveX control has a memory overflow vulnerability. (Vulnerability ID: HWPSIRT-2014-1157)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-9418.