Vulnerability Description
When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflow. This result is then used to allocate memory to copy file data in. Due to the lack of bounds checking on the integer, the allocated memory buffer can be made to be undersized at which point the reading of file data will write outside the bounds of the buffer. This can lead to code execution under the context of the application.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hancom | Hancom Office 2014 | <= 9.1.0.2176 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/92325
- http://www.talosintelligence.com/reports/TALOS-2016-0146/ExploitTechnical DescriptionThird Party Advisory
- http://www.securityfocus.com/bid/92325
- http://www.talosintelligence.com/reports/TALOS-2016-0146/ExploitTechnical DescriptionThird Party Advisory
FAQ
What is CVE-2016-4291?
CVE-2016-4291 is a vulnerability with a CVSS score of 7.8 (HIGH). When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflo...
How severe is CVE-2016-4291?
CVE-2016-4291 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-4291?
Check the references section above for vendor advisories and patch information. Affected products include: Hancom Hancom Office 2014.