Hancom Vulnerabilities and Affected Products
Vulnerabilities associated with Office.
Products
Clear product- Hancom Office7 vulnerabilities
- Office3 vulnerabilities
- Hancom Office 20202 vulnerabilities
- hancom_office_20202 vulnerabilities
- anysign4pc1 vulnerability
- Hancom office Hword NEO1 vulnerability
- Hangul Word Processor in Thinkfree Office NEO Trial Word1 vulnerability
- hangul_word_processor1 vulnerability
- hanom_office_show1 vulnerability
- HCell1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-51598HIGH | Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution VulnerabilityHancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOC files. The issue results from the lack of validating the existence of an object prior to performing operations… CWE-416May 3, 2024 | CVSS8.8v3.1 | EPSS0.722% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-50235HIGH | Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityHancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Show. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PPT files. The issue results from the lack of proper validation of the length of user-supplied data p… | CVSS7.8v3.1 | EPSS0.39% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-50234HIGH | Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityHancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Cell. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS files. The issue results from the lack of proper validation of the length of user-supplied data p… | CVSS7.8v3.1 | EPSS0.338% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |