CVE-2013-3934

Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file...

CVE-2013-3934

The CVE-2013-3934 entry concerns Kingsoft Writer (Kingsoft Office) vulnerable to a stack-based buffer overflow in 2012-era builds (notably 8.1.0.3030) when processing a WPS file with a long font name. The underlying issue is a buffer overflow in the font-name handling path, allowing remote code e...

KLA10238 ACE vulnerability in Kingsoft Writer

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE list...

CVE-2013-3934: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file...

Kingsoft Writer 2012 WPS字体名称缓冲区溢出漏洞

BUGTRAQ ID: 61796 CVECAN ID: CVE-2013-3934 Kingsoft Writer是免费的字处理软件。 Kingsoft Writer 2012在处理字体名称时存在边界错误，攻击者利用带有超长字体名称的特制WPS文件可造成栈缓冲区溢出。 0 Kingsoft Corp Writer 2012 Kingsoft Corp Office 2012 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2013-0723

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via a crafted spreadsheet file...

Heap overflow

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via a crafted spreadsheet file...

CVE-2013-0723

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via a crafted spreadsheet file...

CVE-2013-0723

CVE-2013-0723 affects Kingsoft Spreadsheets 2012 (v8.1.0.3030) and related versions via multiple heap-based buffer overflows in etxrw.dll. The vulnerability can be triggered by a crafted spreadsheet file, potentially leading to memory corruption, denial of service, or arbitrary code execution. Th...

CVE-2013-0723: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in etxrw.dll in Kingsoft Spreadsheets 2012 8.1.0.3030 allow remote attackers to cause a denial of service memory corruption and crash or possibly execute arbitrary code via a crafted spreadsheet file...

Kingsoft Spreadsheets 多个缓冲区溢出漏洞(CVE-2013-0723)

BUGTRAQ ID: 60801 CVECAN ID: CVE-2013-0723 Kingsoft Spreadsheets是创建专业表单、分析和计算数据的应用 Kingsoft Spreadsheets 8.1.0.3030及其他版本存在多个缓冲区溢出漏洞，成功利用后可允许远程攻击者在受影响应用上下文中执行任意代码 0 Kingsoft Corp Spreadsheets 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kingsoft.com/...

MS13-048: Vulnerability in Windows kernel could allow information disclosure: June 11, 2013

None None...

WPS Office 'Wpsio.dll'栈缓冲区溢出漏洞

BUGTRAQ ID: 59529 CVECAN ID: CVE-2012-4886 WPS Office 是金山软件公司的一套办公软件。 WPS Office 2012 及其他版本中，Wpsio.dll模块存在栈缓冲区溢出漏洞，该漏洞源于文件内的某BSTR类型的字符串被复制到栈缓冲区时没有检查长度。攻击者可利用此漏洞造成受影响软件崩溃，可能执行任意代码。 0 Kingsoft Corp WPS Office 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： www.wps....

Kingsoft Office Writer 2007/2010远程缓冲区溢出漏洞(CVE-2013-0710)

BUGTRAQ ID: 58235 CVECAN ID: CVE-2013-0710 Kingsoft Writer是金山办公软件套件中的文字处理组件。 Kingsoft Office Writer 2007\2010在打开特制的富文本文件RTF时存在错误，可造成缓冲区溢出，导致执行任意代码。 0 Kingsoft Corp Office Writer 2010 Kingsoft Corp Office Writer 2007 厂商补丁： Kingsoft Corp ------------- Kingsoft...

CVE-2013-0710

Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document...

Buffer overflow

Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document...

KLA10237 ACE vulnerability in Kingsoft Writer

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed RTF document. Original advisories Kingsoft bulletin Exploitation Related products Kingsoft-Writer CVE...

CVE-2013-0710

CVE-2013-0710 affects Kingsoft Writer 2007 and 2010 (prior to version 2724). The vulnerability is a buffer overflow triggered when opening a crafted RTF document, allowing remote arbitrary code execution. A patch/update to the latest version (2724 or newer) is available per advisories; apply the ...

CVE-2013-0710

Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document...

CVE-2013-0710: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document...