CVE-2013-0710
critical
CVSS v3
โ
CVSS v4 NEW
โ
VIR risk
9.3
Description
Buffer overflow in Kingsoft Writer 2007 and 2010 before 2724 allows remote attackers to execute arbitrary code via a crafted RTF document.
Predictions
Exploit likelihood
20%
Patch ETA
โ
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ if you've already worked around this in production โ publish your fix to the community-verified tier.
โ Propose a mitigation on Community โ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| kingsoft | writer_2007 | - | |
| kingsoft | writer_2010 | {"endIncluding":"2723"} | |
References
- http://jvn.jp/en/jp/JVN55924624/22479/index.html
- http://jvn.jp/en/jp/JVN55924624/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000016
- http://www.kingsoft.jp/support/office/support_news/writer2010_2723
- http://jvn.jp/en/jp/JVN55924624/22479/index.html
- http://jvn.jp/en/jp/JVN55924624/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000016
- http://www.kingsoft.jp/support/office/support_news/writer2010_2723
CWEs
CWE-119
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.