CVE-2018-6390 - The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an _copy call, which allows remote attackers to cause a denial of service (access violation and application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file

Back Back to CVE browser

MEDIUM

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an _copy call, which allows remote attackers to cause a denial of service (access violation and application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file

Published Jan 29, 2018

6.5

MEDIUM

CVSS 3.1

EPSS 1.07%

Description

The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an _copy call, which allows remote attackers to cause a denial of service (access violation and application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (1)

https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180129
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180129		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 29, 2018

Updated Sep 17, 2024

Reserved Jan 29, 2018

Link CVE-2018-6390

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-6390

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-6390