WordPress B2BKing plugin <= 5.2.30 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin B2BKing versions = 5.2.30...

Heap overflow

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds...

CVE-2016-4290

CVE-2016-4290 affects Hancom Hangul Office 2014 (HShow component) and is triggered when processing Hangul HShow documents (.hpt). The vulnerability stems from an integer overflow: when the software reads a length from the file and adds a constant (0x16) to it without checking for overflow, a too-...

CVE-2016-4298

CVE-2016-4298 is a code-execution vulnerability in Hancom Hangul Office HShow component. Talos and other sources describe an integer overflow during processing of Hangul HShow documents (.hpt): while reading a 0x10-byte structure from decompressed zlib data, a length derived from the file is mult...

CVE-2016-4292

CVE-2016-4292 concerns Hancom Hangul Office 2014 VP’s Hangul HShow processing. A structure read from an HShow document (.hpt) causes the app to allocate a fixed 0xa0 byte buffer, then trust a length from the file to modify data inside that buffer. A 16‑bit value (treated as 15-bit) controls a loo...

CVE-2016-4292

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds...