Lucene search

K
jvnJapan Vulnerability NotesJVN:55924624
HistoryMar 01, 2013 - 12:00 a.m.

JVN#55924624: Kingsoft Writer vulnerable to buffer overflow

2013-03-0100:00:00
Japan Vulnerability Notes
jvn.jp
17

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.057

Percentile

93.5%

Kingsoft Writer is a software to edit document files. Kingsoft Writer contains a buffer overflow vulnerability.

Impact

When opening a specially crafted document, an arbitrary code may be executed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

According to the developer, users can update from Kingsoft Writer 2007 to Kingsoft Writer 2010 by the online update.

Products Affected

  • Kingsoft Writer 2007

  • Kingsoft Writer 2010 version 2723 and earlier

Note that KINGSOFT Office for Android is not affected by this vulnerability.

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.057

Percentile

93.5%