CVE-2013-3934

NONE EPSS 94.9%

Published Sep 10, 201312y ago · Modified Jun 16, 20262w ago

Published Sep 10, 2013 12y ago

Last Modified Jun 16, 2026 2w ago

Description

Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file.

Threat Intelligence

EPSS Exploit Probability

94.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 2

Vendor	Product	Version	Range
kingsoft	office_2012	8.1.0.3385	any
kingsoft	writer_2012	8.1.0.3030	any

References 3

secunia.com http://secunia.com/advisories/53266

Vendor Advisory
securityfocus.com http://www.securityfocus.com/bid/61796
securitytracker.com http://www.securitytracker.com/id/1028920

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.