Описание
Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.5.8.1724 (включая)Версия до 9.1.1.4540 (включая)Версия до 10.0.0.8214 (включая)Версия до 9.6.1.10472 (включая)
Одно из
cpe:2.3:a:hancom:hancom_office_2010:*:*:*:*:*:*:*:*
cpe:2.3:a:hancom:hancom_office_2014:*:*:*:*:*:*:*:*
cpe:2.3:a:hancom:hancom_office_2018:*:*:*:*:*:*:*:*
cpe:2.3:a:hancom:hancom_office_neo:*:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00163
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.
EPSS
Процентиль: 37%
0.00163
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-787