Description
The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
http://help.hancom.com/update_en_multilang/details/HOfficeNEO_update.htm
Exploit, Third Party Advisory x_refsource_misc
https://starlabs.sg/advisories/
Scores
CVSS v3
7.8
EPSS
0.0114
EPSS Percentile
62.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (1)
hancom/hancom_office_neo
9.6.1.9403
Published
Mar 19, 2020
Tracked Since
Feb 18, 2026