Hancom Office '.hml' File Processing Heap Buffer Overflow Vulnerability

Bugtraq ID:	64499
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 19 2013 12:00AM
Updated:	Dec 19 2013 12:00AM
Credit:	diroverflow
Vulnerable:	Hancom Hancom Office 2010 SE 8.5.8
Not Vulnerable:

Hancom Office '.hml' File Processing Heap Buffer Overflow Vulnerability

Hancom Office is prone to a remote heap-based buffer-overflow vulnerability.

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file.

Successful exploits will result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Hancom Office 2010 SE 8.5.8 is vulnerable; Other versions may also be affected.

Hancom Office '.hml' File Processing Heap Buffer Overflow Vulnerability

The following example input is available:

<TEXTART Text="AAAAAAAA...(more than 500 bytes)" X0="0" X1="14173" X2="14173" X3="0" Y0="0" Y1="0" Y2="14173" Y3="14173">

Hancom Office '.hml' File Processing Heap Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hancom Office '.hml' File Processing Heap Buffer Overflow Vulnerability

References:

• Hancom Homepage (Hancom)