Hancom Hangul HCell HncChart CFormulaTokenSizeModifier Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0150 Hancom Hangul HCell HncChart CFormulaTokenSizeModifier Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4295 Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul...

Hancom Hangul Office HShow!NXDeleteLineObj+0x560cb Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0144 Hancom Hangul Office HShow!NXDeleteLineObj+0x560cb Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4298 Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul...

Hancom Hangul HCell CSSValFormat::CheckUnderbar Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0151 Hancom Hangul HCell CSSValFormat::CheckUnderbar Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4296 Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office Suite. Hangul Office...

Hancom Hangul Office HShow!NXDeleteLineObj+0x47269 Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0147 Hancom Hangul Office HShow!NXDeleteLineObj+0x47269 Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4292 Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul...

Integer overflow

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

Integer overflow in the HwpApp::CHncSDSManager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service crash and possibly "influenc...

CVE-2015-2810

CVE-2015-2810 affects Hancom Office HanWord and related viewers (HanWord Viewer 2007, Viewer 2010 8.5.6.1158, HwpViewer 2014 VP 9.1.0.2186; Hwp 2014 VP 9.0.x) where an integer overflow in HwpApp::CHncSDS_Manager occurs when assigning a large paragraph size (max ~0x7FFFFFFF). This can trigger heap...

[CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord document

Product: Hancom Office Hwp 2014 Vendor: Hancom - www.hancom.com Versions Affected 32 bits only: HanWord Viewer 2007 Korean HanWord Viewer 2010 ­ 8.5.6.1158 English HwpViewer 2014 VP- 9.1.0.2186 English Hwp 2014 VP - 9.0.0.1405 English/Korean Version Not vulnerable: Hwp 2014 VP - 9.1.0.2342...

Hancom Office memory corruption

Memory corruption on document parsing...

Hancom Office Buffer Overflow Vulnerability

Hancom Office is an office software suite product developed by Hancom Korea. A buffer overflow vulnerability exists in Hancom Office 2010 SE, which allows remote attackers to execute arbitrary code via long strings in the text attribute of a TEXTART XML element in an hml file...

Buffer overflow

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file...

CVE-2013-7420

Summary: CVE-2013-7420 is a buffer overflow in Hancom Office 2010 SE. A long string in the Text attribute of a TEXTART XML element in an HML file can be used remotely to execute arbitrary code. Affected software is Hancom Office 2010 SE; vulnerable component is the TEXTART XML element’s Text attr...

Hancom Office 2007 Reboot.ini Clear-Text Passwords Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/228/info During installation of BackOffice 4.0, a file called reboot.ini is created and stored in the \Program Files\Microsoft BackOffice directory. This file contains clear-text usernames and passwords for several servic...

Hancom Office '.hml' file heap-based buffer overflow

There is a vulnerability in Hancom Office 2010 SE, which can be exploited by malicious people to compromise a user's system. '.hml' is a type of XML document files which is defined by Hancom. Contructing a long TEXTART tag will cause a heap-based buffer overflow. Such as: TEXTART...

Hancom Office buffer overflow

Buffer overflow on HTML parsing...

Hancom Office - .hml File Processing Heap Buffer Overflow

Hancom Office - .hml File Processing Heap Buffer Overflow source: https://www.securityfocus.com/bid/64499/info Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document fil...

Hancom Office - '.hml' File Processing Heap Buffer Overflow

source: https://www.securityfocus.com/bid/64499/info Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file. Successful exploits will result in the execution of...