Design/Logic Flaw

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted image...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

Design/Logic Flaw

Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted QES file...

CVE-2014-9415

Huawei eSpace Desktop prior to V100R001C03 is affected by CVE-2014-9415 due to improper handling of QES files, allowing a local user to trigger a denial of service (program exit). Affected component is the eSpace Desktop client/process when importing a crafted QES file, with the issue described a...

CVE-2014-9417

CVE-2014-9417 concerns Huawei eSpace Desktop (Meetings component) prior to V100R001C03. The vulnerability is a denial of service caused by processing a crafted image file, leading to program exit when the eSpace Meeting imports/handles certain image formats. Public entries describe a buffer/forma...

CVE-2014-9416

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 mfc71enu.dll, 2 mfc71loc.dll, 3 tcapi.dll, or 4 airpcap.dll...

CVE-2014-9415

Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted QES file...

CVE-2014-9418

Huawei eSpace Desktop (eSpace Meeting) is affected by a heap-based memory overflow in the ActiveX controls ContactsCtrl.dll and eSpaceStatusCtrl.dll. The vulnerability occurs when parsing a large amount of bytes (GetNameyNum() in ContactsCtrl.dll), leading to memory overflow and possible denial o...

CVE-2014-9417

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service program exit via a crafted image...

Security Advisory-Multiple Vulnerabilities in Huawei eSpace Desktop Product

Huawei eSpace Desktop products have the following vulnerabilities: 1 The program does not implement comprehensive validity check on the QES file imported into the system, causing the system to exit unexpectedly. Vulnerability ID: HWPSIRT-2014-1151 This vulnerability has been assigned Common...