CVEvulnerability

CVE-2015-2810

7.5 HIGH Published 2015-05-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-05-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-189

Description

Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service (crash) and possibly "influence the program's execution flow" via a document with a large paragraph size, which triggers heap corruption.

Affected configurations

• hancom hanword viewer 2007 • hancom hanword viewer 2010 8.5.6.1158 • hancom hwp 2014 (<= 9.1.0.2342) • hancom hwpviewer 2014 9.1.0.2186

Related

Weakness · not in database (1)

References