Vulnerabilities

TI-2019-12297 CVE-2019-16338 · GHSA-r8x4-33mp-x79r

The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.

LOW 36

The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01033 Published 2020-03-19 No fix listed CWE-416

TI-2019-12296 CVE-2019-16337 · GHSA-rq38-266f-49jm

The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.

LOW 36

The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01135 Published 2020-03-19 No fix listed CWE-416

TI-2018-03760 CVE-2018-5201 · GHSA-g457-3qpj-v3gc

Out-of-bounds write in Hancom Office

LOW 26

Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0068 Published 2018-12-21 No fix listed CWE-787

Vulnerabilities

Filters

The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.

The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.

Out-of-bounds write in Hancom Office