CVE-2014-7216
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote...
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
- Record
CVE-2014-7216- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
- Record
CVE-2014-7216- Updated
- 2026-11-02
EUVDEUVD-2014-7089 No score
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
- Record
EUVD-2014-7089- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5v9m-r264-24vr No score
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote...
Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the (1) shortcut or (2) title keys in an emoticons.xml file.
- Record
GHSA-5v9m-r264-24vr- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-7216 is a high vulnerability (CVSS 9.3) in Yahoo Messenger, published September 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.83%, the 94th percentile. No source names a fixed version.
References
rcesecurity.com/2015/09/cve-2014-7216-a-journey-through-yahoos-bug-bounty-program
hackerone.com/reports/10767
securityfocus.com/archive/1/536390/100/0/threaded
securitytracker.com/id/1033544
seclists.org/fulldisclosure/2015/Sep/24
packetstormsecurity.com/files/133443/Yahoo-Messenger-11.5.0.228-Buffer-Overflow.html
nvd.nist.gov/vuln/detail/CVE-2014-7216
github.com/advisories/GHSA-5v9m-r264-24vr