CVE-2017-2819

CVE-2017-2819 is an exploitable heap-based buffer overflow in Hancom Thinkfree Office NEO (Hangul Word Processor, Hangul WPD) v9.6.1.4350. The issue occurs when processing HWPTAG_TAB_DEF(22) records in the DocInfo stream of the Hangul Word Processing Document format; a signed comparison during dy...

CVE-2015-6585

The hwpapp.dll component in Hancom Hangul Word Processor is vulnerable to a type confusion flaw triggered by an HWPX file containing a crafted para text tag . Remote attackers can leverage this vulnerability, combined with a crafted heap spray , to achieve arbitrary code execution or cause a deni...