Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-34312

In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2023-34312
  • Tencent » Qq » Version: 9.7.1.28940
    cpe:2.3:a:tencent:qq:9.7.1.28940
  • Tencent » Qq » Version: 9.7.8.29039
    cpe:2.3:a:tencent:qq:9.7.8.29039
  • Tencent » Tim » Version: 3.4.5.22071
    cpe:2.3:a:tencent:tim:3.4.5.22071
  • Tencent » Tim » Version: 3.4.7.22084
    cpe:2.3:a:tencent:tim:3.4.7.22084


Contact Us

Shodan ® - All rights reserved