CVE-2018-5201 — MEDIUM (5.5)

Q: How severe is CVE-2018-5201?

CVE-2018-5201 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2018-5201?

Check the references section above for vendor advisories and patch information. Affected products include: Hancom Hancom Office 2010, Hancom Hancom Office 2014, Hancom Hancom Office 2018, Hancom Hancom Office Neo.

Vulnerability Description

Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.

CVSS Score

5.5

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Hancom	Hancom Office 2010	<= 8.5.8.1724
Hancom	Hancom Office 2014	<= 9.1.1.4540
Hancom	Hancom Office 2018	<= 10.0.0.8214
Hancom	Hancom Office Neo	<= 9.6.1.10472

Related Weaknesses (CWE)

CWE-787

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116PatchThird Party Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116PatchThird Party Advisory

FAQ

What is CVE-2018-5201?

CVE-2018-5201 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflo...

How severe is CVE-2018-5201?

CVE-2018-5201 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-5201?

Check the references section above for vendor advisories and patch information. Affected products include: Hancom Hancom Office 2010, Hancom Hancom Office 2014, Hancom Hancom Office 2018, Hancom Hancom Office Neo.