CVE-2018-6400

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\WPSCloudSvr\WpsCloudSvr -- an "insecurely created named pipe." Ensures full access to Everyone users group...

Design/Logic Flaw

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\WPSCloudSvr\WpsCloudSvr -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6400

CVE-2018-6400 affects Kingsoft WPS Office Free 10.2.0.5978. The vulnerability arises from an insecurely created named pipe, \.\pipe\WPSCloudSvr\WpsCloudSvr, which can be impersonated to obtain full access via a NULL DACL. This enables local privilege escalation or denial of service by a low-privi...

CVE-2018-6400

Kingsoft WPS Office Free 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of \.\pipe\WPSCloudSvr\WpsCloudSvr -- an "insecurely created named pipe." Ensures full access to Everyone users group...

PT-2018-17534

Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office Free version 10.2.0.5978 Description The issue allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .pipeWPSCloudSvrWpsCloudSvr, which is described as an...

WPS Office 10.2.0.5978 - NULL DACL grants full access Vulnerability

Exploit for multiple platform in category local exploits ===== Tempest Security Intelligence - ADV-16/2018 === WPS Free Office 10.2.0.5978 - NULL DACL grants full access ------------------------------------------------------- Author: - Filipe Xavier Oliveira: filipe.xavier tempest.com.br =====...

Denial of Service Vulnerability in WPS office 2016 Personal Edition/Enterprise Edition and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial-of-service vulnerability exists in WPS office 2016 Personal/Enterprise Edition a...

WPS Free Office 10.2.0.5978 NULL DACL Grants Full Access

===== Tempest Security Intelligence - ADV-16/2018 === WPS Free Office 10.2.0.5978 - NULL DACL grants full access ------------------------------------------------------- Author: - Filipe Xavier Oliveira: filipe.xavier tempest.com.br ===== Table of Contents...

Memory out-of-bounds read vulnerability exists in WPS office 2016 Personal/Enterprise and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. wps office 2016 enterprise edition, personal edition and wpspdf in the parsing of a...

Memory Misreference Vulnerability in WPS office 2016 Personal/Enterprise and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. wps office 2016 enterprise edition and personal edition in the resolution of a specific p...

Null pointer reference vulnerability in WPS Office 2016 demo aeocenter module

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS Presentation wpp.exe in WPS has a null pointer reference vulnerability in the aeocenter module when parsing a specific ppsx file, which can be exploited by an attacker to cause a denial of service attack...

Null pointer reference vulnerability in WPS Office 2016 demo pptxrw module

WPS office is an office software suite independently developed by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of the WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service...

Null pointer reference vulnerability in WPS Office 2016 presentation kso module

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the kso module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attack...

Null pointer reference vulnerability in WPS Office 2016 presentation kso module (CNVD-2018-04915)

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the kso module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attack or code...

Memory corruption vulnerability in WPS Office 2016 presentation kso module

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of WPS presentation wpp.exe in WPS when parsing a specific pptx file, which can be exploited by an attacker to cause a denial of service attack or cod...

Denial of Service Vulnerability in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf (CNVD-2018-04657)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. A denial of service vulnerability exists in WPS Office 2016 Personal Edition, Enterprise...

Denial of Service Vulnerability in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf

WPS Office is an office software suite independently developed by Kingsoft Corporation. Kingsoft PDF is a PDF reading tool. A denial of service vulnerability exists in WPS Office 2016 Personal Edition, Enterprise Edition and Kingsoft pdf when parsing pdf files. The vulnerability is caused due to...

Denial of Service Vulnerability in WPS Text (CNVD-2018-04291)

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS text wps.exe in WPS when parsing a specific docx file. An attacker can exploit this vulnerability to cause a denial of service...

Denial of Service Vulnerability in WPS Text (CNVD-2018-04292)

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS text wps.exe in WPS when parsing a specific doc file. An attacker can exploit this vulnerability to cause a denial of service...

Denial of Service Vulnerability in WPS Forms (CNVD-2018-03666)

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS Formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...