CVE-2015-0014
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
- Record
CVE-2015-0014- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
- Record
CVE-2015-0014- Updated
- 2026-11-02
EUVDEUVD-2015-0052 No score
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
- Record
EUVD-2015-0052- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-79p7-jrh4-232r No score
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows Telnet Service Buffer Overflow Vulnerability."
- Record
GHSA-79p7-jrh4-232r- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0014 is a high vulnerability (CVSS 10.0) in Microsoft Windows 7, published January 13, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 96.9%, the 99th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-002
exchange.xforce.ibmcloud.com/vulnerabilities/99517
securityfocus.com/bid/71968
secunia.com/advisories/61580
securitytracker.com/id/1031523
nvd.nist.gov/vuln/detail/CVE-2015-0014
github.com/advisories/GHSA-79p7-jrh4-232r