Denial of Service Vulnerability in WPS Office 2019 PC Version

WPSOffice 2019 is a new 2019 version of wps office software suite developed by Kingsoft. A denial of service vulnerability exists in WPS Office 2019 for PC, which can be exploited by attackers to cause the application to crash...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

Authentication flaw

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

CVE-2020-15023

Askey AP5100W devices through AP5100WDualSIG1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted and even failed WPS authentication attempt, it is possible to brute...

CVE-2020-15023

CVE-2020-15023 affects Askey AP5100W devices up to AP5100W_Dual_SIG_1.01.097. The root cause is poor randomness in the Diffie-Hellman exchange, enabling offline WPS PIN brute-forcing: an attacker can observe WPS attempts and brute-force the authentication exchange, recovering the WPS PIN and ulti...

PT-2020-14125 · Askey · Ap5100W

Name of the Vulnerable Software and Affected Versions: Askey AP5100W devices through AP5100W Dual SIG 1.01.097 Description: The issue arises from problems with the random number selection for the Diffie-Hellman exchange, allowing an attacker to brute force the overall authentication exchange by...

Denial of Service Vulnerability in WPS office

WPS office is an office software launched by Kingsoft. WPS office has a denial of service vulnerability that can be exploited by attackers to conduct denial of service attacks...

Denial of Service Vulnerability in WPS Office (CNVD-2020-73312)

WPS Office is an office software launched by Kingsoft. A denial of service vulnerability exists in WPS Office, which can be exploited by attackers to conduct denial of service attacks...

Denial of Service Vulnerability in WPS Office (CNVD-2020-73313)

WPS Office is an office software launched by Kingsoft. A denial of service vulnerability exists in WPS Office, which can be exploited by attackers to conduct denial of service attacks...

Memory Corruption Vulnerability in WPS Office 2019 Professional (CNVD-2020-62505)

WPS Office 2019 Professional is a computer office application. WPS Office 2019 Professional Edition suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Memory Corruption Vulnerability in WPS Office 2019 Professional (CNVD-2020-58440)

WPS Office 2019 Professional is a computer office application. WPS Office 2019 Professional Edition suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Memory Corruption Vulnerability in WPS Office 2019 Professional Edition

WPS Office 2019 Professional is a computer office application. WPS Office 2019 Professional Edition suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Memory corruption vulnerability exists in WPS Office Campus Edition of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2020-58362)

WPS Office Campus Edition is designed for school teachers and students, embedded with massive educational teaching resources. A memory corruption vulnerability exists in WPS Office Campus Edition of Zhuhai Kingsoft Office Software Company Limited, which can be exploited by attackers to cause a...

Memory corruption vulnerability exists in WPS Campus Edition (CNVD-2020-58844)

WPS Campus Edition is designed for school teachers and students, embedded with massive educational teaching resources. A memory corruption vulnerability exists in WPS Campus Edition, which can be exploited by attackers to cause a denial of service...

Kingsoft WPS Office Remote Heap Corruption Vulnerability

WPS Office is an office software released by Kingsoft Corporation Kingsoft, which can be applied to the most commonly used functions of office software, such as text editing, spreadsheets and presentations. A remote heap corruption vulnerability exists in Kingsoft WPS Office versions prior to...

CVE-2020-25291

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x...

CVE-2020-25291

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x...

Cross site request forgery (csrf)

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x...

CVE-2020-25291

CVE-2020-25291 affects Kingsoft WPS Office prior to 11.2.0.9403. A crafted PNG PLTE chunk in a Word document can trigger a remote heap corruption via GdiDrawHoriLineIAlt, related to QBrush::setMatrix in Qt 4.x. Affects WPS Office's handling of embedded graphics in Word documents; root cause is th...

CVE-2020-25291

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x...