ByteOS Network

NVD Vulnerability Details :

CVE-2022-33896

Analyzed

Source-talos-cna@cisco.com

Published At-07 Oct, 2022 | 15:15

Updated At-11 Oct, 2022 | 15:28

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

hancom>>hancom_office_2020>>11.0.0.5357

cpe:2.3:a:hancom:hancom_office_2020:11.0.0.5357:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-124	Primary	talos-cna@cisco.com

References

Hyperlink	Source	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1574	talos-cna@cisco.com	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History