PT-2017-8462 · Hancom · Hncchartplugin.Hplg+1

Published 2017-01-06 · Updated 2017-01-11 · CVE-2016-4295

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hancom Office version 2014

Description The issue arises when opening a Hangul Hcell Document (.cell) and processing a specific record within the Workbook stream, leading to an index miscalculation and a potential heap overflow. This occurs due to the processing of data for a formula used to render a chart via the HncChartPlugin.hplg library. The lack of bounds-checking when incrementing an index used for writing into a buffer for formulae allows the application to write pointer data outside its bounds, potentially leading to code execution under the context of the application.

Recommendations For Hancom Office version 2014, consider disabling the HncChartPlugin.hplg library as a temporary workaround to minimize the risk of exploitation. Restrict access to the formula rendering functionality to reduce the likelihood of the issue being triggered. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-4295

Affected Products

Hancom Office

Hncchartplugin.Hplg

References · 4

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0150 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-4295 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4295 · Vendor Advisory
• http://securityfocus.com/bid/92327 · Note