N/A

When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the HncChartPlugin.hplg library. Due to a lack of bounds-checking when incrementing an index that is used for writing into a buffer for formulae, the application can be made to write pointer data outside its bounds which can lead to code execution under the context of the application.

N/A

N/A

Hancom Office Hangul Hcell应用程序缓冲区错误漏洞

Hancom Office 2014 VP（Value Pack）是韩国Hancom公司开发的一套云存储服务解决方案。Hangul Hcell是其中的一个电子表格应用程序。 Hancom Office 2014 VP中的Hangul Hcell应用程序存在基于堆的缓冲区溢出漏洞，该漏洞源于程序缺少边界检查。攻击者可利用该漏洞在应用程序上下文中执行代码。

N/A

N/A