PolarisOffice 2017 8 - Remote Code Execution

PolarisOffice 2017 8 - Remote Code Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/POLARISOFFICE-2017-v8-REMOTE-CODE-EXECUTION.txt + ISR: Apparition Security Vendor: ============= www.polarisoffice.com Product:...

CVE-2018-12589

PolarisOffice 2017 (v8/8.1) contains a Remote Code Execution vulnerability (CVE-2018-12589) that can be triggered by a Trojan horse puiframeworkproresenu.dll placed in the current working directory and opening a compatible document. The flaw stems from a search-order weakness that allows the mali...