Memory Corruption Vulnerability in WPS Presentation

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in WPS presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or execute arbitrary code...

Address Out-of-Bounds Read Vulnerability in WPS Forms etmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. An address out-of-bounds read vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file. An attacker exploiting this vulnerability could cause a denial of service or...

Memory Corruption Vulnerability in WPS Forms kso Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of formset.exe in WPS when parsing a specific xls file. An attacker could cause a denial of service by exploiting this vulnerability...

Null Pointer Reference Vulnerability in WPS Presentation pptxrw Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in the pptxrw module of WPS Presentation wpp.exe in WPS when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service or lea...

Out-of-bounds access vulnerability in WPS Text docreader module

WPS is an office software developed by Kingsoft Office Software. An out-of-bounds access vulnerability exists in the WPS text docreader module. The vulnerability is due to a miscalculation of the read buffer length. An attacker exploiting this vulnerability could cause process information...

WPS Text wpsmain.dll has a null pointer reference denial of service vulnerability

WPS is an office software developed by Kingsoft Office Software. WPS text wpsmain.dll has a null pointer reference denial of service vulnerability. The vulnerability is due to the program failed to assign a value to the pointer, an attacker can use this vulnerability can lead to a denial of servi...

Stack Overflow Vulnerability in WPS

WPS is an office software developed by Kingsoft Office Software. A stack overflow vulnerability exists in WPS text. The vulnerability is due to the program failing to validate the buffer length. An attacker can exploit the vulnerability by constructing a malformed XML file resulting in heap...

Heap overflow vulnerability exists in WPS (CNVD-2017-19997)

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS. The vulnerability stems from the program's failure to validate the buffer length, which can be exploited by an attacker to cause heap corruption or execute arbitrary code by constructing ...

Memory out-of-bounds write vulnerability in WPS Text WordConvertDll module

WPS is an office software developed by Kingsoft Office Software. A memory out-of-bounds write vulnerability exists in the WPS text WordConvertDll module. The vulnerability is caused due to the program failing to validate the buffer length when the user uses the Traditional and Simplified Conversi...

Arbitrary Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. An arbitrary password reset vulnerability exists in Kingsoft wordmaster android app. Due to a design flaw in the feature of changing cell phone number, an attacker can reset the password of another person by only...

Arbitrary User Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a free translation and learning software from Kingsoft. Kingsoft wordmaster android app there is any user password reset vulnerability, the vulnerability arises from the change of password did not increase the verification of the old password due to the attacker can take...

WPS has 8 out-of-bounds access vulnerabilities

WPS Office is a set of office software developed by Beijing Kingsoft Office Software Company. A memory out-of-bounds access vulnerability exists in the kso and docreader modules of WPS Text. The vulnerability stems from insufficient checking for length out-of-bounds, and is caused by direct calls...

Kingsoft PDF has a Denial of Service Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF there is a denial of service vulnerability. Due to the existence of a jp2000 jpx format image in the file, jpx exists in the image color space sycc422 or sycc420 converted to rgb there are abnormal data is not processed, which can lead to a program...

Kingsoft PDF Exploit Vulnerability

Kingsoft PDF is an office software. Kingsoft PDF has a release reuse vulnerability. As a result of opening the document, the document business processing block there is a business object reference count, resulting in the document object is not released, resulting in memory leakage to form this...

DLL Hijacking Vulnerability in Kingsoft PPT Beautifier Software

Kingsoft PPT Beautifier is a PPT beautification and creation aid. Kingsoft PPT Beautifier has a DLL hijacking vulnerability, allowing attackers to exploit the vulnerability in the windows2003\windows7 environment, variable relative OFFICE software infection, even if the malicious DLL deleted from...

Command Execution Vulnerability in Kingsoft RealEase Intelligent DNS Management System

Kingsoft RealEase Intelligent DNS Management System is a set of intelligent domain name management system for domain name management enterprises, IDCs and operators. A command execution vulnerability exists in the Kingsoft RealEase Intelligent DNS Management System, which allows attackers to...

Kingsoft General System has ROOT privilege command execution vulnerability

Kingsoft is one of the Internet software companies. Kingsoft General System has a ROOT privilege command execution vulnerability. The vulnerability exists in the file: /src/system/dhcpdialog.php The main code can be seen here: $IGoperation = $POST'IGoperation'; $IGcardname = $POST'IGcard';...

Kingsoft KingGate Firewall suffers from roo privilege command execution vulnerability

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a roo privilege command execution vulnerability. It allows attackers to exploit the vulnerability to gain server privileges...

biz.kingsoft.jp XSS vulnerability

Vulnerable URL: https://biz.kingsoft.jp/wowtalk/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WPS Office .ppt drawingContainer Memory Corruption Vulnerability

Kingsoft WPS Office is an office software suite with popular components such as Writer, Spreadsheets and Presentation. A memory corruption vulnerability exists in Kingsoft WPS Office, which could be exploited by an attacker to construct a malicious file that could be parsed by the user, causing t...