Hancom Office '.hml' file heap-based buffer overflow

There is a vulnerability in Hancom Office 2010 SE, which can be exploited by malicious people to compromise a user's system. '.hml' is a type of XML document files which is defined by Hancom. Contructing a long TEXTART tag will cause a heap-based buffer overflow. Such as: TEXTART...

Hancom Office buffer overflow

Buffer overflow on HTML parsing...

Hancom Office - .hml File Processing Heap Buffer Overflow

Hancom Office - .hml File Processing Heap Buffer Overflow source: https://www.securityfocus.com/bid/64499/info Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document fil...

Hancom Office - '.hml' File Processing Heap Buffer Overflow

source: https://www.securityfocus.com/bid/64499/info Hancom Office is prone to a remote heap-based buffer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file. Successful exploits will result in the execution of...

CVE-2012-1206

Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a 1 JPG image to the ImportGR in the JPG image filter module HncJpeg10.flt or 2 PNG image to the PNG image filter module HncPng10.flt, which triggers a heap-bas...

CVE-2012-1206

Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a 1 JPG image to the ImportGR in the JPG image filter module HncJpeg10.flt or 2 PNG image to the PNG image filter module HncPng10.flt, which triggers a heap-bas...

CVE-2012-1206

Hancom Office 2010 SE 8.5.5 contains two vulnerable image filters: HncJpeg10.flt (JPG) and HncPng10.flt (PNG). Large dimension values trigger integer overflows in these filters, leading to a heap-based buffer overflow and enabling remote code execution. The public documents do not provide specifi...

CVE-2012-1206: Undefined Security Weakness

Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a 1 JPG image to the ImportGR in the JPG image filter module HncJpeg10.flt or 2 PNG image to the PNG image filter module HncPng10.flt, which triggers a heap-bas...