Lucene search

K
kasperskyKaspersky LabKLA10237
HistoryMar 05, 2013 - 12:00 a.m.

KLA10237 ACE vulnerability in Kingsoft Writer

2013-03-0500:00:00
Kaspersky Lab
threats.kaspersky.com
41

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.057

Percentile

93.5%

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RTF document.

Original advisories

Kingsoft bulletin

Related products

Kingsoft-Writer

CVE list

CVE-2013-0710 critical

Solution

Update to latest version

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • Kingsoft Writer 2007 all versionsKingsoft Writer 2010 versions 2723 and earlier

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.057

Percentile

93.5%