Kingsoft Writer CVE-2013-3934 Stack Buffer Overflow Vulnerability

Bugtraq ID:	61796
Class:	Boundary Condition Error
CVE:	CVE-2013-3934
Remote:	Yes
Local:	No
Published:	Aug 15 2013 12:00AM
Updated:	Dec 02 2013 10:18AM
Credit:	Kaveh Ghaemmaghami via Secunia
Vulnerable:
Not Vulnerable:

Kingsoft Writer CVE-2013-3934 Stack Buffer Overflow Vulnerability

Kingsoft Writer is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

The following versions are vulnerable:

Kingsoft Writer 2012 8.1.0.3030
Kingsoft Kingsoft Office 2012 8.1.0.3385

Kingsoft Writer CVE-2013-3934 Stack Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following exploit is available:

• /data/vulnerabilities/exploits/61796.py

Kingsoft Writer CVE-2013-3934 Stack Buffer Overflow Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Kingsoft Writer CVE-2013-3934 Stack Buffer Overflow Vulnerability

References:

• Kingsoft Homepage (Great Worth)