Vulnerability CVE-2021-21958

Vulnerability CVE-2021-21958

Published: 2022-02-16

Description:

A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file can lead to memory corruption and potential arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Type:

CWE-787

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Hancom -> Hancom office 2020

References:

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1386

https://blog.talosintelligence.com/2022/02/vuln-spotlight-.html

Copyright 2024, cxsecurity.com