Lucene search

K
zdiDave Weinstein - HP Zero Day InitiativeZDI-15-410
HistorySep 02, 2015 - 12:00 a.m.

(0Day) Corel WordPerfect Heap Buffer Overflow Remote Code Execution Vulnerability

2015-09-0200:00:00
Dave Weinstein - HP Zero Day Initiative
www.zerodayinitiative.com
7

EPSS

0.115

Percentile

95.3%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Corel WordPerfect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion from documents formatted for Microsoft Word. By providing a malformed file, an attacker can cause memory to be written past the end of a heap buffer. An attacker could leverage this vulnerability to execute arbitrary code under the context of the current user.

EPSS

0.115

Percentile

95.3%

Related for ZDI-15-410