CVE-2018-5201

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Office 2010 8.5.8.1724 and earlier versions have a heap overflow vulnerability when handling Compound File in document. This result in a program crash or denial of service conditions.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Dec 21, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-52027.8SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exis CVE-2018-52039.8DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote ar CVE-2018-52049.8ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute CVE-2018-52057.5When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.CVE-2018-52069.8When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.CVE-2018-52077.5When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.CVE-2018-52089.8In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.CVE-2018-52108.1On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE CVE-2018-52119.8PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist.CVE-2018-52125.4The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload_thumbnail (aka File Thumbnail) parameter in an edit CVE-2018-52135.4The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action CVE-2018-52145.4The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fb_facebook_id parameter to wp-admin/profile.php.