CVE-2018-6390: Buffer Overflow
The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service (access violation and application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6390?
CVE-2018-6390 has a severity rating that indicates it can cause a denial of service due to an access violation.
How do I fix CVE-2018-6390?
To fix CVE-2018-6390, users should update WPS Office to a version that addresses the vulnerability, specifically versions beyond 10.2.0.5978.
What versions of WPS Office are affected by CVE-2018-6390?
CVE-2018-6390 affects WPS Office versions 10.1.0.7106 and 10.2.0.5978.
What type of attack does CVE-2018-6390 enable?
CVE-2018-6390 enables remote attackers to cause denial of service attacks through crafted inputs.
Is CVE-2018-6390 related to memory management issues?
Yes, CVE-2018-6390 is related to improper validation of memory block sizes before copying, leading to potential crashes.