Cyber Risks · Cisco Talos

Vulnerability Spotlight: Hangul Word Processor Remote Code Execution Vulnerability

Summary: Cisco Talos reported a remote code execution vulnerability in Hangul Word Processor, discovered by a member of Talos, with details in report TALOS-2017-0320. The known vulnerable version is Hancom Office 2014 version 9.1.0.2172, and Snort rules 35832 through 35833 cover it.

What's compelling: A document processor used in Korean-language environments is a working target for remote code execution, and the only version named here is Hancom Office 2014 9.1.0.2172 - so any estate still running that build carries the exposure until it is identified and addressed.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related