CVE-2015-8489: Input Validation
Published Feb 17, 2016
·Updated
customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a crafted CSV file, a different vulnerability than CVE-2016-1153.
Affected Software
8 affected components
Cybozu Office=9.9.0
Cybozu Office=10.0.0
Cybozu Office=10.0.1
Cybozu Office=10.0.2
Cybozu Office=10.1.0
Cybozu Office=10.1.2
Cybozu Office=10.2.0
Cybozu Office=10.3.0
Event History
Feb 17, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8489?
CVE-2015-8489 is considered a denial of service vulnerability, which can lead to excessive database locking.
2
How do I fix CVE-2015-8489?
To fix CVE-2015-8489, update to a version of Cybozu Office later than 10.3.0.
3
Which versions of Cybozu Office are affected by CVE-2015-8489?
CVE-2015-8489 affects Cybozu Office versions 9.9.0 through 10.3.0.
4
Can remote authenticated users exploit CVE-2015-8489?
Yes, remote authenticated users can exploit CVE-2015-8489 by using a crafted CSV file.
5
What impact does CVE-2015-8489 have on systems?
The impact of CVE-2015-8489 includes potential service disruption due to denial of service from database locking.