Hancom Office - '.hml' File Processing Heap Buffer Overflow

Author: diroverflow
type: remote
platform: windows
port: 0
date_added: 2013-12-19
date_updated: 2015-12-08
verified: 1
codes: CVE-2013-7420;OSVDB-101136
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/64499/info

Hancom Office is prone to a remote heap-based buffer-overflow vulnerability.

An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious '.hml' document file.

Successful exploits will result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Hancom Office 2010 SE 8.5.8 is vulnerable; Other versions may also be affected.

<TEXTART Text="AAAAAAAA...(more than 500 bytes)" X0="0" X1="14173" X2="14173" X3="0" Y0="0" Y1="0" Y2="14173" Y3="14173">