Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34312

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.

Published

2023-06-01T03:15:20.673

Last Modified

2025-01-09T17:15:10.757

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-763
  • Type: Secondary
    CWE-763
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tencent qq ≤ 9.7.8.29039 Yes
Application tencent tim ≤ 3.4.7.22084 Yes
References