vendor:
Hancom Office
by:
SecurityFocus
9,3
CVSS
HIGH
Heap-Based Buffer-Overflow
119
CWE
Product Name: Hancom Office
Affected Version From: Hancom Office 2010 SE 8.5.8
Affected Version To: Other versions may also be affected.
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2014
Hancom Office Remote Heap-Based Buffer-Overflow Vulnerability
Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file. Successful exploits will result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
Mitigation:
Users should avoid opening untrusted '.hml' document files.
