CVE-2015-6585

HOCH 7.8CVE-2015-6585 · Published 25/07/2017 · updated 17/06/2026

Kurz gesagt

CVE-2015-6585 ist eine Schwachstelle (HOCH (CVSS 7.8)) in hangul word processor (hancom).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.5%, höher als bei 84.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
hangul word processor hancom	`= 2014`	No fix yet

Description

hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag.

References

hancom.com/cs_center/csDownload.do · Vendor Advisory
securityfocus.com/bid/76694 · Third Party Advisory
fireeye.com/blog/threat-research/2015/09/zero-day_hwp_exploit.html · Third Party Advisory
fireeye.com/content/dam/fireeye-www/global/en/blog/threat-research/FireEye_HWP_ZeroDay.pdf · Third Party Advisory

Weitere Schwachstellen in hangul word processor

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free