← Back

Thinkfree Office Neo

thinkfree_office_neo

Vendor: Hancom • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hancom
1Thinkfree Office Neo
Nov 21, 2024
Jan 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document.
1Hancom
2Hangul Word Processor
Thinkfree Office Neo
May 13, 2026
May 24, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow r...Show more
An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability.Show less