N/A

An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to write a 16-bit null relative to a buffer allocated on the stack. Due to a lack of bounds-checking on this value, this can allow an attacker to write to memory outside of the buffer and controllably corrupt memory. This can allow an attacker to earn code execution under the context of the application. An attacker can entice the victim to open a document to trigger this vulnerability.

N/A

跨界内存写

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker是德国Softmaker（SoftMaker）公司的一款支持多平台的办公软件中的电子表格套件。 SoftMaker Office 2021 PlanMaker application 存在缓冲区错误漏洞，该漏洞源于缺乏对该值的边界检查，攻击者可利用该漏洞写入缓冲区之外的内存，并可控制地破坏内存。

N/A

N/A