Lucene search
+L

502 matches found

CNVD
CNVD
•added 2018/02/06 12:00 a.m.•7 views

Memory Corruption Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption exists in WPS text wps.exe in WPS when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or possibly code execution...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/06 12:00 a.m.•14 views

Memory corruption vulnerability exists in WPS Presentation (CNVD-2018-03653)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/06 12:00 a.m.•7 views

Stack Overflow Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS text wps.exe in WPS has a stack overflow when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or code execution...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/04 12:00 a.m.•3 views

Denial of Service Vulnerability in Kingsoft's WPS Office Suite

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. Kingsoft WPS Office suite processing ppt executable program wpp.exe in the execution...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/02/02 12:00 a.m.•7 views

Denial of Service Vulnerability in WPS Software of Kingsoft Corporation Ltd.

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. Kingsoft WPS software has a memory access vulnerability when viewing the executable progr...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/01/30 12:00 a.m.•16 views

Kingsoft WPS Office Denial of Service Vulnerability

Kingsoft WPS Office is an office software suite from the Chinese company Kingsoft, commonly used components include Writer word processing, Spreadsheets spreadsheets and Presentation presentations. A security vulnerability exists in the 'WStr::assign' function of the kso.dll file in Kingsoft WPS...

6.5CVSS6.8AI score0.01074EPSS
SaveExploits1References1
OSV
OSV
•added 2018/01/29 7:29 p.m.•19 views

CVE-2018-6390

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service access violation and application crash via a crafted a web page, b office...

6.5CVSS5.8AI score0.01074EPSS
SaveExploits1References1
NVD
NVD
•added 2018/01/29 7:29 p.m.•28 views

CVE-2018-6390

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service access violation and application crash via a crafted a web page, b office...

6.5CVSS6.4AI score0.01074EPSS
SaveExploits1References1
Prion
Prion
•added 2018/01/29 7:29 p.m.•24 views

Code injection

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service access violation and application crash via a crafted a web page, b office...

4.3CVSS6.4AI score0.01074EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2018/01/29 7:00 p.m.•72 views

CVE-2018-6390

The vulnerability CVE-2018-6390 affects Kingsoft WPS Office, specifically the WStr::assign function in kso.dll used by WPS Office versions 10.1.0.7106 and 10.2.0.5978. The issue arises because the source memory block size is not validated before a _copy call, allowing remote attackers to trigger ...

6.5CVSS6.3AI score0.01074EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/29 12:00 a.m.•7 views

CVE-2018-6390: Improper Restriction of Operations within the Bounds of a Memory Buffer

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service access violation and application crash via a crafted a web page, b office...

6.5CVSS6.7AI score0.01074EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/29 12:00 a.m.•3 views

PT-2018-17525

Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office versions 10.1.0.7106 through 10.2.0.5978 Description The issue arises from the WStr::assign function in kso.dll, which fails to validate the size of the source memory block before making a copy call. This oversight allows...

6.5CVSS0.01074EPSS
SaveExploits1References3
OSV
OSV
•added 2018/01/25 8:29 a.m.•14 views

CVE-2018-6217

The WStr::allociostrdata function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service application crash via a crafted a web page, b office document, or c .rtf file...

5.5CVSS5.8AI score0.00877EPSS
SaveExploits1References1
NVD
NVD
•added 2018/01/25 8:29 a.m.•25 views

CVE-2018-6217

The WStr::allociostrdata function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service application crash via a crafted a web page, b office document, or c .rtf file...

5.5CVSS5.5AI score0.00877EPSS
SaveExploits1References1
CVE
CVE
•added 2018/01/25 8:00 a.m.•53 views

CVE-2018-6217

The CVE-2018-6217 issue affects Kingsoft WPS Office, specifically the WStr::_alloc_iostr_data() function in kso.dll. Versions 10.1.0.7106 and 10.2.0.5978 are vulnerable to a remote denial of service (application crash) via crafted input, including a web page, an office document, or an .rtf file. ...

5.5CVSS5.4AI score0.00877EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2018/01/25 12:00 a.m.•15 views

Kingsoft WPS Office Denial of Service Vulnerability

Kingsoft WPS Office is an office software suite from the Chinese company Kingsoft, commonly used components include Writer word processing, Spreadsheets spreadsheets and Presentation presentations. A security vulnerability exists in the 'WStr::allociostrdata' function of the kso.dll file in...

5.5CVSS6.8AI score0.00877EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/01/25 12:00 a.m.•3 views

PT-2018-17415

Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office versions 10.1.0.7106 through 10.2.0.5978 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through a crafted web page, office document, or .r...

5.5CVSS0.00877EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/25 12:00 a.m.•3 views

CVE-2018-6217: Improper Input Validation

The WStr::allociostrdata function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service application crash via a crafted a web page, b office document, or c .rtf file...

5.5CVSS6AI score0.00877EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2018/01/04 12:00 a.m.•43 views

Kingsoft Antivirus / Internet Security 9+ Privilege Escalation

''' Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus aprovides effective and efficient protection solution at no cost to users. It applies cloud security...

1AI score
SaveExploits0
zdt
zdt
•added 2018/01/04 12:00 a.m.•33 views

Kingsoft Antivirus / Internet Security 9+ - Privilege Escalation Exploit

Exploit for windows platform in category local exploits """ Kingsoft Antivirus/Internet Security 9+ Kernel Stack Buffer Overflow Privilege Escalation Vulnerability Anti-Virus: http://www.kingsoft.co/downloads/kav/KAV100720ENUDOWN33102010.rar Internet Security:...

0.3AI score
SaveExploits0
Rows per page
Query Builder