Hancom Office '.hwp' File Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	50648
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 11 2011 12:00AM
Updated:	Nov 11 2011 12:00AM
Credit:	Reported by the vendor
Vulnerable:	Hancom Hancom Office 2010 SE 0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Hancom Hancom Office 2007 0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Hancom Hancom Office 2005 0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Hancom Hancom Office 2004 0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Hancom Hancom Office 2002 0 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0
Not Vulnerable:

Hancom Office '.hwp' File Unspecified Remote Code Execution Vulnerability

Hancom Office is prone to an unspecified remote code-execution vulnerability.

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hwp' document file.

Successful exploits will result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Hancom Office '.hwp' File Unspecified Remote Code Execution Vulnerability

This issue is actively being exploited in the wild.

Hancom Office '.hwp' File Unspecified Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Hancom Office '.hwp' File Unspecified Remote Code Execution Vulnerability

References:

• [Notice] Hancom security update (Hancom)
  
• Hancom Homepage (Hancom)