Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34134)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the kso module of formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Null Pointer Reference Vulnerability in WPS Forms (CNVD-2017-30610)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer reference vulnerability exists in formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or lead to code execution...