#HANCOM OFFICE 2014 FOR MAC DOWNLOAD CODE#
(1b4.d1c): Access violation - code c0000005 (first chance)įirst chance exceptions are reported before any exception handling. Instruction pointer has been overwritten: The unexpected paragraph size may cause heap corruption when HWP writes
Ptr[HwpApp!CHncSDS_Manager::CHncSDS_Manager+0x4a7990 HwpApp!CHncSDS_Manager::CHncSDS_Manager+0x4089ec: The integer overflow happens inside the HwpApp::CHncSDS_Manager function.Ī sequence of arithmetic operations on the paragraph size value ends in aĪ paragraph size value of 0x7fffffff, the multiplication results inĠx4000001b*4 = 0x10000006c, which causes the 32-bit register to overflowĮip=048b163c esp=0d39ef88 ebp=40000000 iopl=0 nv up ei pl nz na peĬs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 These accesses may corrupt the heap, allowing attackers to Subsequent accesses to the bufferĭisagree on the buffer¹s size, and may access memory outside of theīuffer. This value can overflow the 32bit integer, resulting HWP accepts a maximum paragraph size of 0x7fffffff, which is used toĪllocate memory for the content of a paragraph. (also called Hangul a.k.a HWP) is vulnerable to an integer overflow when Hancom is an office suite developer in South Korea. : FireEye provides technical details and a PoC to Hancom to
: Hancom replied asking for the technical details. : FireEye contacted Hancom letting them know about the Vendor: Hancom - Versions Affected (32 bits only): Change Mirror Download Product: Hancom Office Hwp 2014
0 kommentar(er)
