Multiple vulnerabilities in KIWI CatTools

Description

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities

1. A directory traversal vulnerability can be exploited remotely via a specially designed pathname;
2. Weak encryption of sensitive information can be exploited locally via decryption.

Original advisories

Related products

• Kiwi-CatTools

CVE list

• CVE-2007-0889
  warning
• CVE-2007-0888
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com