CVE-2016-4296 in Office정보

요약

\~에 의해 MITRE

When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore ("_") character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application will mistakenly write the null-byte outside the bounds of its destination. This can result in heap corruption that can lead code execution under the context of the application

If you want to get best quality of vulnerability data, you may have to visit VulDB.

예약하다

2016. 04. 27.

모더레이션

수락

항목

VDB-95079

EPSS

0.00527

출처

Do you want to use VulDB in your project?

Use the official API to access entries easily!