CVE-2016-4293

Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document (.cell) file.

Score

CVSS 3.0 7.8 High

Status

Modified - cret@cert.org

Published

2017-04-20

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Hancom Office 2014 (Hancom)

References

• http://www.securityfocus.com/bid/92327
• http://www.talosintelligence.com/reports/TALOS-2016-0148/