CVE-2012-1206 Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module....
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module (HncJpeg10.flt) or (2) PNG image to the PNG image filter module (HncPng10.flt), which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hancom office 2010 se | = 8.5.5 | No fix listed |
References
- 78906 vdb-entry
- 78907 vdb-entry
- 47386 third-party-advisory vendor-advisory
- www.hancom.co.kr
- 51892 vdb-entry
- hancom-importgr-bo(73025) vdb-entry
- hancom-png-bo(73026) vdb-entry