CVE-2016-4296

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-01-06 · updated 2026-06-17
Weakness: CWE-119

Description

When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore ("_") character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application will mistakenly write the null-byte outside the bounds of its destination. This can result in heap corruption that can lead code execution under the context of the application

Affected products

Hancom Office: through 9.1.0.2176

References

http://www.securityfocus.com/bid/92327
http://www.talosintelligence.com/reports/TALOS-2016-0151/
http://www.securityfocus.com/bid/92327
http://www.talosintelligence.com/reports/TALOS-2016-0151/

Get alerted when CVE-2016-4296 or the next vulnerability affects your stack