CVE-2018-5201

Published: Dic 21, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-16986 Aliases: GSD-2018-5201
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,5
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: none
Integrity: none
Availability: partial

Description

AI Translation Available

Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0016
Percentile
0,4th
Updated

EPSS Score Trend (Last 91 Days)

787

Out-of-bounds Write

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Other
Potential Impacts:
Modify Memory Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Unexpected State
Applicable Platforms
Languages: Assembly, C, C++, Memory-Unsafe
Technologies: ICS/OT
Likelihood of Exploit: High
View CWE Details
Application

Hancom Office Neo by Hancom

Product Information
Vendor Hancom
Product Hancom Office Neo
Version Range Affected
To 9.6.1.10472 (inclusive)
cpe:2.3:a:hancom:hancom_office_neo:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Hancom Office 2014 by Hancom

Product Information
Vendor Hancom
Product Hancom Office 2014
Version Range Affected
To 9.1.1.4540 (inclusive)
cpe:2.3:a:hancom:hancom_office_2014:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Hancom Office 2018 by Hancom

Product Information
Vendor Hancom
Product Hancom Office 2018
Version Range Affected
To 10.0.0.8214 (inclusive)
cpe:2.3:a:hancom:hancom_office_2018:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Hancom Office 2010 by Hancom

Product Information
Vendor Hancom
Product Hancom Office 2010
Version Range Affected
To 8.5.8.1724 (inclusive)
cpe:2.3:a:hancom:hancom_office_2010:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_wri…
Patch Third Party Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_wri…
Patch Third Party Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30116