PT-2012-1419 · Kingsoft · Kingsoft Office

Aung Khant · Published 2012-09-06 · Updated 2012-09-06 · CVE-2010-5208

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kingsoft Office 2010 version 6.6.0.2477

Description The issue concerns untrusted search path vulnerabilities in multiple components of Kingsoft Office 2010, including Presentation, Writer, and Spreadsheets. This allows local users to gain privileges by placing a Trojan horse plgpf.dll file in the current working directory, potentially exploiting the vulnerability when the directory contains specific file types such as .xls, .ppt, .rtf, or .doc.

Recommendations For Kingsoft Office 2010 version 6.6.0.2477, consider removing or restricting access to the plgpf.dll file in the current working directory to minimize the risk of exploitation. Additionally, avoid opening files from untrusted sources, especially in directories that may contain malicious plgpf.dll files, until a patch or fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-5208

Affected Products

Kingsoft Office

References · 3

• http://secunia.com/advisories/41406 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-5208 · Security Note
• http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bkingsoft_office%5D_2010_insecure_dll_hijacking · Note