CVE-2022-25969 - The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer

Back Back to CVE browser

HIGH

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer

Published Mar 17, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.83%

Description

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

Vendor Kingsoft Japan, Inc. Product The installer of WPS Office Default
n/a
- Version
  Reported for Version 10.8.0.6186
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Kingsoft Japan, Inc.

The installer of WPS Office

n/a

Version	Status	Constraints
Reported for Version 10.8.0.6186	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30541
Advisory
https://jvn.jp/en/jp/JVN21234459/
third-party-advisoryx_refsource_JVNThird Party Advisory
https://support.kingsoft.jp/support-info/weakness.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30541		Advisory
https://jvn.jp/en/jp/JVN21234459/		third-party-advisoryx_refsource_JVNThird Party Advisory
https://support.kingsoft.jp/support-info/weakness.html		x_refsource_CONFIRMVendor Advisory