CVE-2017-17967

pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482...

CVE-2017-17967

CVE-2017-17967 affects Kingsoft WPS Office (pptreader.dll) version 10.1.0.6930. A crafted PPT file can cause a denial of service. The connected sources confirm the vulnerable component and the impact, but do not provide technical exploit details, root-cause analysis beyond the PPT parsing issue, ...

CVE-2017-17967

pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482...

Kingsoft Antivirus/Internet Security 9+ Privilege Escalation Exploit

Exploit for windows platform in category dos / poc Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus “provides effective and efficient protection solution at...

Kingsoft Antivirus/Internet Security 9+ Privilege Escalation

Vulnerability Summary The following advisory describes a kernel stack buffer overflow that leads to privilege escalation found in Kingsoft Antivirus/Internet Security 9+. Kingsoft Antivirus “provides effective and efficient protection solution at no cost to users. It applies cloud security...

Denial of Service Vulnerability in Kingsoft WPS PPT

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in Kingsoft WPS pptreader.dll when parsing a specific ppt format, which can be exploited by attackers to launch a denial of service attack...

Denial of Service Vulnerability in Kingsoft WPS

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in Kingsoft WPS, which is caused due to abnormal data not being handled properly in the conversion of the color space sycc422 or sycc420 to rgb in jpx images. An attack...

Integer Overflow Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. An integer overflow vulnerability exists in formset.exe in WPS when parsing a specific xlsx file, which can be exploited by an attacker to cause a denial of service or code execution...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34135)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Memory Out of Bounds Vulnerability in WPS Presentation

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory out-of-bounds vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or code execution...

Denial of Service Vulnerability in WPS Presentation (CNVD-2017-33992)

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has an out-of-bounds read error to memory when parsing a specific ppt file, which can be exploited by attackers to cause a denial of service...

WPS Presentation suffers from a null pointer reference vulnerability (CNVD-2017-33983)

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the kso module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or code...

SRC-2017-0029 : Kingsoft Antivirus and Internet Security Kernel Stack Buffer Overflow Privilege Escalation Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Kingsoft Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific fla...

Memory Corruption Vulnerability in WPS Presentation

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or execute arbitrary code...

Memory Corruption Vulnerability in WPS Demo kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of WPS Presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or execute...

Memory Corruption Vulnerability in WPS Forms kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of formset.exe in WPS when parsing a specific xls file. An attacker could cause a denial of service by exploiting this vulnerability...

Address Out-of-Bounds Read Vulnerability in WPS Forms etmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. An address out-of-bounds read vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file. An attacker exploiting this vulnerability could cause a denial of service or...

Null Pointer Reference Vulnerability in WPS Presentation pptxrw Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of WPS Presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or lea...

Out-of-bounds access vulnerability in WPS Text docreader module

WPS is an office software developed by Kingsoft Office Software. An out-of-bounds access vulnerability exists in the WPS text docreader module. The vulnerability is due to a miscalculation of the read buffer length. An attacker exploiting this vulnerability could cause process information...

WPS Text wpsmain.dll has a null pointer reference denial of service vulnerability

WPS is an office software developed by Kingsoft Office Software. WPS text wpsmain.dll has a null pointer reference denial of service vulnerability. The vulnerability is due to the program failed to assign a value to the pointer, an attacker can use this vulnerability can lead to a denial of servi...