Beveiligingsadvies

CVE-2022-33896

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-07 15:05:08
Laatst bijgewerkt 2025-04-15 18:49:15
Toegewezen door talos
CVSS-score 7.8
Status PUBLISHED

Beschrijving

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.