Lucene search

K
cveMitreCVE-2012-4886
HistoryMar 24, 2014 - 4:43 p.m.

CVE-2012-4886

2014-03-2416:43:01
CWE-119
mitre
web.nvd.nist.gov
30
cve-2012-4886
buffer overflow
wpsio.dll
kingsoft wps office 2012
remote code execution
nvd
vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.424

Percentile

97.3%

Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string.

Affected configurations

Nvd
Node
kingsoftoffice_2012Match8.1.0.3238
VendorProductVersionCPE
kingsoftoffice_20128.1.0.3238cpe:2.3:a:kingsoft:office_2012:8.1.0.3238:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.3

Confidence

Low

EPSS

0.424

Percentile

97.3%