Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06352)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06355)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06353)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06358)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Hancom Office 2014 VP Local Arbitrary Code Execution Vulnerability (CNVD-2016-06357)

Hancom Office 2014 VP is a cloud storage service solution developed by Hancom Korea. Hancom Office 2014 VP suffers from a local arbitrary code execution vulnerability that could be exploited by a local attacker to execute arbitrary code in the context of the application or conduct a denial of...

Integer overflow

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

CVE-2015-2810 affects Hancom Office HanWord and related viewers (HanWord Viewer 2007, Viewer 2010 8.5.6.1158, HwpViewer 2014 VP 9.1.0.2186; Hwp 2014 VP 9.0.x) where an integer overflow in HwpApp::CHncSDS_Manager occurs when assigning a large paragraph size (max ~0x7FFFFFFF). This can trigger heap...

[CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord document

Product: Hancom Office Hwp 2014 Vendor: Hancom - www.hancom.com Versions Affected 32 bits only: HanWord Viewer 2007 Korean HanWord Viewer 2010 ­ 8.5.6.1158 English HwpViewer 2014 VP- 9.1.0.2186 English Hwp 2014 VP - 9.0.0.1405 English/Korean Version Not vulnerable: Hwp 2014 VP - 9.1.0.2342...

Hancom Office memory corruption

Memory corruption on document parsing...

Hancom Office Buffer Overflow Vulnerability

Hancom Office is an office software suite product developed by Hancom Korea. A buffer overflow vulnerability exists in Hancom Office 2010 SE, which allows remote attackers to execute arbitrary code via long strings in the text attribute of a TEXTART XML element in an hml file...

Buffer overflow

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Summary: CVE-2013-7420 is a buffer overflow in Hancom Office 2010 SE. A long string in the Text attribute of a TEXTART XML element in an HML file can be used remotely to execute arbitrary code. Affected software is Hancom Office 2010 SE; vulnerable component is the TEXTART XML element’s Text attr...

Hancom Office 2007 Reboot.ini Clear-Text Passwords Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/228/info During installation of BackOffice 4.0, a file called reboot.ini is created and stored in the \Program Files\Microsoft BackOffice directory. This file contains clear-text usernames and passwords for several servic...

Hancom Office '.hml' file heap-based buffer overflow

There is a vulnerability in Hancom Office 2010 SE, which can be exploited by malicious people to compromise a user's system. '.hml' is a type of XML document files which is defined by Hancom. Contructing a long TEXTART tag will cause a heap-based buffer overflow. Such as: TEXTART...

Hancom Office buffer overflow

Buffer overflow on HTML parsing...

Hancom Office - .hml File Processing Heap Buffer Overflow

Hancom Office - .hml File Processing Heap Buffer Overflow source: https://www.securityfocus.com/bid/64499/info Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document fil...