CVE-2016-4290— Hancom Office Hangul HShow 整数错误漏洞

N/A

When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of data within the file. When calculating this length, the application will use a value from the file and add a constant to it without checking whether the addition of the constant will cause the integer to overflow which will cause the buffer to be undersized when the application tries to copy file data into it. This allows one to overwrite contiguous data in the heap which can lead to code-execution under the context of the application.

N/A

N/A

Hancom Office Hangul HShow 整数错误漏洞

Hancom Office 2014 VP（Value Pack）是韩国Hancom公司开发的一套云存储服务解决方案。Hangul HShow是其中的一个演示文稿应用程序。 Hancom Office 2014 VP中的Hangul HShow应用程序存在整数溢出漏洞。攻击者可利用该漏洞在应用程序上下文中执行代码。

N/A

N/A