CVE-2016-4293 Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via....
HighCVSS 7.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document (.cell) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hancom office 2014 | = 9.1.0.2176 | No fix listed |
References
- 92327 third-party-advisory vdb-entry
- www.talosintelligence.com exploit technical-description third-party-advisory vdb-entry