TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) by connecting to a channel with a different client instance and placing crafted data in the Chat/Server tab containing img//http:// substrings.