Skip to content
Noroxi

Hancom records

25 published records for vendor hancom.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2018-5195
    40Plan

    Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands wh

    CriticalCVSS 9.8No exploitEPSS 3%

    hancom · thinkfree office neoJan 17, 2018

  • CVE-2012-1206
    38Monitor

    Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (

    CriticalCVSS 9.3No exploitEPSS 5%

    hancom · hancom office 2010 seFeb 24, 2012

  • CVE-2020-7882
    36Monitor

    anySign directory traversal vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    hancom · anysign4pcNov 22, 2021

  • CVE-2023-51598
    35Monitor

    Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    hancom · office wordMay 2, 2024

  • CVE-2023-40250
    35Monitor

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This

    HighCVSS 8.8No exploitEPSS 1%

    hancom · hcellJan 11, 2024

  • CVE-2013-7420
    32Monitor

    Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART X

    HighCVSS 7.5Proof of conceptEPSS 7%

    hancom · hancom office 2010 seJan 12, 2015

  • CVE-2016-4293
    32Monitor

    Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase::SetDefPivotStyle functions in Hancom Office 2

    HighCVSS 7.8No exploitEPSS 4%

    hancom · hancom office 2014Apr 20, 2017

  • CVE-2015-6585
    32Monitor

    hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type co

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hangul word processorJul 25, 2017

  • CVE-2016-4294
    32Monitor

    When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4298
    32Monitor

    When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spac

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4295
    32Monitor

    When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4296
    32Monitor

    When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for a

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4290
    32Monitor

    When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will attempt to allocate spac

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4291
    32Monitor

    When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a field from the str

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2016-4292
    32Monitor

    When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to all

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hancom office 2014Jan 6, 2017

  • CVE-2015-2810
    31Monitor

    Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWo

    HighCVSS 7.5No exploitEPSS 2%

    hancom · hanword viewer 2007May 15, 2015

  • CVE-2017-2819
    31Monitor

    An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO

    HighCVSS 7.8No exploitEPSS 2%

    hancom · hangul word processorMay 24, 2017

  • CVE-2019-16337
    31Monitor

    The hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object in a crafted .docx file.

    HighCVSS 7.8No exploitEPSS 1%

    hancom · hancom office neoMar 19, 2020

  • CVE-2021-21958
    31Monitor

    A heap-based buffer overflow vulnerability exists in the Hword HwordApp.dll functionality of Hancom Office 2020 11.0.0.2353.

    HighCVSS 7.8No exploitEPSS 1%

    hancom · hancom office 2020Feb 16, 2022

  • CVE-2019-16338
    31Monitor

    The tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file.

    HighCVSS 7.8No exploitEPSS 1%

    hancom · hancom office neoMar 19, 2020

  • CVE-2023-32541
    31Monitor

    A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520.

    HighCVSS 7.8No exploitEPSS 1%

    hancom · hancom office 2020Sep 27, 2023

  • CVE-2022-33896
    31Monitor

    A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files.

    HighCVSS 7.8No exploitEPSS 1%

    hancom · hancom office 2020Oct 7, 2022

  • CVE-2023-50235
    31Monitor

    Hancom Office Show PPT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    hancom · office showMay 2, 2024

  • CVE-2023-50234
    31Monitor

    Hancom Office Cell XLS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    hancom · office cellMay 2, 2024

  • CVE-2018-5201
    22Monitor

    Hancom Office 2018 10.0.0.8214 and earlier, Hancom Office NEO 9.6.1.10472 and earlier, Hancom Office 2014 9.1.1.4540 and earlier, Hancom Off

    MediumCVSS 5.5No exploitEPSS 1%

    hancom · hancom office 2010Dec 21, 2018