Thinkfree Office NEO Trial Word 'HWPTAG_TAB_DEF' Heap Buffer Overflow Vulnerability

Bugtraq ID:	98715
Class:	Boundary Condition Error
CVE:	CVE-2017-2819
Remote:	Yes
Local:	No
Published:	May 12 2017 12:00AM
Updated:	May 12 2017 12:00AM
Credit:	Cisco Talos
Vulnerable:	Hancom Thinkfree Office NEO Trial Word 9.6.1.4902 Hancom Office Hanword 2010 9.6.1.4350 Hancom Hangul Word Processor 9.6.1.4350
Not Vulnerable:

Thinkfree Office NEO Trial Word 'HWPTAG_TAB_DEF' Heap Buffer Overflow Vulnerability

Thinkfree Office NEO Trial Word is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Thinkfree Office NEO Trial Word 9.6.1.4902 is vulnerable; other versions may also be vulnerable.

Thinkfree Office NEO Trial Word 'HWPTAG_TAB_DEF' Heap Buffer Overflow Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Thinkfree Office NEO Trial Word 'HWPTAG_TAB_DEF' Heap Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Thinkfree Office NEO Trial Word 'HWPTAG_TAB_DEF' Heap Buffer Overflow Vulnerability

References:

• Hancom Hangul Word Processor - Homepage (Hancom)
  
• Hancom Thinkfree NEO Hangul Word Processor HWPTAG_TAB_DEF Tab Count Code Executi (Talos)