Lucene search
+L
KingsoftOffice 2012

2 matches found

CVE
CVE
added 2013/09/10 7:00 p.m.105 views

CVE-2013-3934

The CVE-2013-3934 entry concerns Kingsoft Writer (Kingsoft Office) vulnerable to a stack-based buffer overflow in 2012-era builds (notably 8.1.0.3030) when processing a WPS file with a long font name. The underlying issue is a buffer overflow in the font-name handling path, allowing remote code e...

9.3CVSS7.9AI score0.09751EPSS
Save
CVE
CVE
added 2014/03/24 2:00 p.m.69 views

CVE-2012-4886

CVE-2012-4886 describes a stack-based buffer overflow in Kingsoft WPS Office 2012’s wpsio.dll (likely version 8.1.0.3238 or similar). A long BSTR string copied into a stack buffer enables a remote attacker to execute arbitrary code. Public PoCs and exploits exist (e.g., Exploit-DB, PoC binaries, ...

10CVSS8.3AI score0.15349EPSS
Save