Security Advisory

CVE-2020-25291

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-13 19:35:09
Last updated 2024-08-04 15:33:05
Assigner mitre
State PUBLISHED

Description

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.