PT-2018-17525 · Kingsoft · Kingsoft Wps Office

Publicado 2018-01-29 · Atualizado 2021-01-28 · CVE-2018-6390

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kingsoft WPS Office versions 10.1.0.7106 through 10.2.0.5978

Description The issue arises from the WStr::assign function in kso.dll, which fails to validate the size of the source memory block before making a copy call. This oversight allows remote attackers to trigger a denial of service, resulting in an access violation and application crash. The attack can be initiated through various crafted files, including web pages, office documents, or .rtf files.

Recommendations For Kingsoft WPS Office versions 10.1.0.7106 through 10.2.0.5978, consider disabling the WStr::assign function in kso.dll as a temporary workaround until a patch is available. Restrict access to potentially malicious web pages, office documents, and .rtf files to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-6390

Produtos afetados

Kingsoft Wps Office

Referências · 4

• 🔥❌ https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180129 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-6390 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6390 · Nota de Segurança
• https://t.me/cvenotify/9043 · Publicação no Telegram