Hancom
25 CVEs across 22 Hancom products. Browse Hancom vulnerabilities, severities, and proof-of-concept exploits.
Hancom products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51598 | High | 8.8 | 2024-05-03 | Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-50235 | High | 7.8 | 2024-05-03 | Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2023-50234 | High | 7.8 | 2024-05-03 | Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2023-40250 | High | 8.8 | 2024-01-12 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCel… |
CVE-2023-32541 | High | 8.8 | 2023-09-27 | A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-aft… |
CVE-2022-33896 | High | 7.8 | 2022-10-07 | A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed… |
CVE-2021-21958 | High | 7.8 | 2022-02-16 | A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353. A specially-crafted malformed file… |
CVE-2020-7882 | High | 7.5 | 2021-11-22 | Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the… |
CVE-2019-16338 | High | 7.8 | 2020-03-19 | The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file. |
CVE-2019-16337 | High | 7.8 | 2020-03-19 | The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file. |
CVE-2018-5201 | Medium | 5.5 | 2018-12-21 | Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724… |
CVE-2018-5195 | Critical | 9.8 | 2018-01-17 | Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the h… |
CVE-2015-6585 | High | 7.8 | 2017-07-25 | hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWP… |
CVE-2017-2819 | High | 8.8 | 2017-05-24 | An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A speci… |
CVE-2016-4293 | High | 7.8 | 2017-04-20 | Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote… |
CVE-2016-4298 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a list of ele… |
CVE-2016-4296 | High | 7.8 | 2017-01-06 | When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore ("_")… |
CVE-2016-4295 | High | 7.8 | 2017-01-06 | When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow c… |
CVE-2016-4294 | High | 7.8 | 2017-01-06 | When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to allocate space for… |
CVE-2016-4292 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer… |
CVE-2016-4291 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operat… |
CVE-2016-4290 | High | 7.8 | 2017-01-06 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of da… |
CVE-2015-2810 | | 2015-05-15 | Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and… | |
CVE-2013-7420 | | 2015-01-12 | Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HM… | |
CVE-2012-1206 | | 2012-02-24 | Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the… |