Multiple vulnerabilities in KIWI CatTools

Описание

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities

1. A directory traversal vulnerability can be exploited remotely via a specially designed pathname;
2. Weak encryption of sensitive information can be exploited locally via decryption.

Первичный источник обнаружения

Связанные продукты

• Kiwi-CatTools

Список CVE

• CVE-2007-0889
  warning
• CVE-2007-0888
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com