cbcvebase.
CVE-2012-1206
published 2012-02-24

CVE-2012-1206: Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the…

PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.82%
90.9th percentile
Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module (HncJpeg10.flt) or (2) PNG image to the PNG image filter module (HncPng10.flt), which triggers a heap-based buffer overflow.

Affected

1 ranges
VendorProductVersion rangeFixed in
hancomhancom_office_2010_se——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.