CVE-2018-6217 The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (application crash) via a crafted (a) web page...
MediumCVSS 5.5
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kingsoftstore kingsoft wps office | = 10.1.0.7106 | No fix listed |
| kingsoftstore kingsoft wps office | = 10.2.0.5978 | No fix listed |
References
- github.com exploit third-party-advisory