CVE-2016-4296
This can result in heap corruption that can lead code execution under the context of the application
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore ("_") character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application will mistakenly write the null-byte outside the bounds of its destination. This can result in heap corruption that can lead code execution under the context of the application
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.23% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- hancom/hancom office 2014
- Source
- cret@cert.org
References
- http://www.securityfocus.com/bid/92327
- http://www.talosintelligence.com/reports/TALOS-2016-0151/Exploit, Technical Description, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/92327
- http://www.talosintelligence.com/reports/TALOS-2016-0151/Exploit, Technical Description, Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.