CVE-2013-3934 – Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Local Buffer Overflow (SEH)

https://notcve.org/view.php?id=CVE-2013-3934

Stack-based buffer overflow in Kingsoft Writer 2012 8.1.0.3030, as used in Kingsoft Office 2013 before 9.1.0.4256, allows remote attackers to execute arbitrary code via a long font name in a WPS file. Desbordamiento de pila en Kingsoft Writer 2012 8.1.0.3030, al igual que el utilizado en Kingsoft Office 2013 anterior a 9.1.0.4256, permite a atacantes remotos ejecutar código a discrección a través de un nombre de fuente largo en un archivo WPS. • https://www.exploit-db.com/exploits/29922 http://secunia.com/advisories/53266 http://www.securityfocus.com/bid/61796 http://www.securitytracker.com/id/1028920 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •