CVE-2018-5195 Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document.
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hancom thinkfree office neo | <= 9.6.1.5183 | No fix listed |
| Hancom office Hword NEO | = 9.6.1.5183 and earlier | No fix listed |
References
- help.hancom.com vendor-advisory
- www.krcert.or.kr third-party-advisory vdb-entry