CVE-2012-4886 – WPS Office - 'Wpsio.dll' Stack Buffer Overflow

https://notcve.org/view.php?id=CVE-2012-4886

Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to execute arbitrary code via a long BSTR string. Desbordamiento de buffer basado en pila en wpsio.dll en Kingsoft WPS Office 2012 posiblemente 8.1.0.3238 permite a atacantes remotos ejecutar código arbitrario a través de una cadena BSTR larga. • https://www.exploit-db.com/exploits/25140 http://osvdb.org/92847 http://packetstormsecurity.com/files/121431/WPS-Office-Stack-Buffer-Overflow.html http://seclists.org/fulldisclosure/2013/Apr/247 http://www.exploit-db.com/exploits/25140 http://www.securityfocus.com/bid/59529 https://exchange.xforce.ibmcloud.com/vulnerabilities/83862 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •