Description
The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
http://help.hancom.com/update_en_multilang/details/HOfficeNEO_update.htm
Exploit, Third Party Advisory x_refsource_misc
https://starlabs.sg/advisories/
Scores
CVSS v3
7.8
EPSS
0.0103
EPSS Percentile
59.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (1)
hancom/hancom_office_neo
9.6.1.7634
Published
Mar 19, 2020
Tracked Since
Feb 18, 2026