hancom

Top products

The 15 most recently published vulnerabilities affecting hancom.

• CVE-2023-51598Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability8.8May 3, 2024
• CVE-2023-50235Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8May 3, 2024
• CVE-2023-50234Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8May 3, 2024
• CVE-2023-40250Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell: 12.0.0.893. 8.8Jan 12, 2024
• CVE-2023-32541A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user ...8.8Sep 26, 2023
• CVE-2022-33896A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by u...7.8Oct 7, 2022
• CVE-2021-21958A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file can lead to memory corruption and pot...7.8Feb 16, 2022
• CVE-2020-7882anySign directory traversal vulnerability7.5Nov 22, 2021
• CVE-2019-16338The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.7.8Mar 19, 2020
• CVE-2019-16337The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.7.8Mar 19, 2020
• CVE-2018-5201Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap over...5.5Dec 21, 2018
• CVE-2018-5195Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document.9.8Jan 17, 2018
• CVE-2015-6585hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text ...7.8Jul 25, 2017
• CVE-2017-2819An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause...8.8May 24, 2017
• CVE-2016-4293Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code v...7.8Apr 20, 2017