CVE-2022-33896

Katalog CVE

CVSS 7.8 · High EPSS 0,53%

Kerentanan Buffer Underwrite ('Buffer Underflow') pada hancom office 2020. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

7 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-124: Buffer Underwrite ('Buffer Underflow')

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1574 exploit · advisory pihak ketiga