Hancom Office DOC File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC...

EUVD-2015-2898

Malware in sbrugna...

EUVD-2018-16986

Malware in sbrugna...

EUVD-2019-7116

Malware in sbrugna...

EUVD-2016-5294

Malware in sbrugna...

EUVD-2023-56310

Malicious code in bioql PyPI...

CVE-2023-50234

Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Cell. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-51598 Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability

Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Word. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-50235 Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Show. User interaction is required to exploit this vulnerability in that the target...

CVE-2023-32541

A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger this vulnerability...

Design/Logic Flaw

A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger this vulnerability...

CVE-2023-32541

CVE-2023-32541 is a use-after-free in Hancom Office 2020 HWord 11.0.0.7520 (footerr feature). Talos details show the vulnerability arises when parsing a malformed .doc with multiple footerr entries, causing a heap object to be allocated and freed, then reused via a deallocated pointer (use-after-...

CVE-2023-32541

A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger this vulnerability...

Hancom Office 2020 HWord footerr use-after-free vulnerability

Talos Vulnerability Report TALOS-2023-1759 Hancom Office 2020 HWord footerr use-after-free vulnerability September 26, 2023 CVE Number CVE-2023-32541 SUMMARY A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file c...

CVE-2022-33896

CVE-2022-33896 affects Hancom Office 2020 (version 11.0.0.5357) and specifically the Hword component that parses XML-based documents. The TALOS report details a heap/buffer underflow in Hword/word processing XML parsing, where opening a crafted .docx file can cause memory corruption and potential...

Hancom Office 2020 Hword Docx XML parsing heap underflow vulnerability

Talos Vulnerability Report TALOS-2022-1574 Hancom Office 2020 Hword Docx XML parsing heap underflow vulnerability October 4, 2022 CVE Number CVE-2022-33896 SUMMARY A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A...

Vulnerability Spotlight: Vulnerability in Hancom Office could lead to memory corruption, code execution

Marcin “Icewall” Noga of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered a vulnerability in Hancom Office — a popular software suite in South Korea — that could allow an attacker to corrupt memory on the targeted machine or execute remote... This...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68042)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-68034)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-65232)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...