PT-2013-2548 · Kingsoft · Kingsoft Writer

Yuji Ukai · Published 2013-03-02 · Updated 2013-03-05 · CVE-2013-0710

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kingsoft Writer versions 2007 through 2010 before 2724

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted RTF document.

Recommendations For Kingsoft Writer versions 2007 through 2010 before 2724, update to version 2724 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-0710

Affected Products

Kingsoft Writer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-0710 · Security Note
• http://kingsoft.jp/support/office/support_news/writer2010_2723 · Vendor Advisory
• http://jvn.jp/en/jp/JVN55924624/22479/index.html · Note
• http://jvn.jp/en/jp/JVN55924624/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000016 · Note