Lucene search

[email protected]CVE-2018-5201

HistoryDec 21, 2018 - 4:29 p.m.

CVE-2018-5201

2018-12-2116:29:00

CWE-787

[email protected]

web.nvd.nist.gov

hancom office

cve-2018-5201

vulnerability

heap overflow

compound file

denial of service

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.4%

JSON

Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.

CPENameOperatorVersion
hancom:hancom_office_2018hancom hancom office 2018le10.0.0.8214
hancom:hancom_office_neohancom hancom office neole9.6.1.10472
hancom:hancom_office_2014hancom hancom office 2014le9.1.1.4540
hancom:hancom_office_2010hancom hancom office 2010le8.5.8.1724

CPE	Name	Operator	Version
hancom:hancom_office_2018	hancom hancom office 2018	le	10.0.0.8214
hancom:hancom_office_neo	hancom hancom office neo	le	9.6.1.10472
hancom:hancom_office_2014	hancom hancom office 2014	le	9.1.1.4540
hancom:hancom_office_2010	hancom hancom office 2010	le	8.5.8.1724

References

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.4%

JSON

Related for CVE-2018-5201

prion1 cvelist1