Stack-based Buffer Overflow in Kingsoft WPS Office 2012

CVE-2012-4886

What is CVE-2012-4886?

A stack-based buffer overflow vulnerability exists in the wpsio.dll component of Kingsoft WPS Office 2012 (version 8.1.0.3238). This flaw can be exploited by malicious remote attackers to execute arbitrary code by sending a specially crafted long BSTR string. Such an exploit could allow an attacker to take control of the affected system, potentially leading to unauthorized access and data compromise. Users and organizations using this version of WPS Office are recommended to implement security best practices and monitor for any suspicious activity related to this vulnerability.

References