Denial of Service Vulnerability in Kingsoft WPS Office and Jinshan PDF
CVE-2018-7546

5.5MEDIUM

Key Information:

Vendor

Kingsoft

Status
Jinshan PDF
WPs Office
Vendor
CVE Published:
18 July 2018

What is CVE-2018-7546?

A vulnerability exists in the wpsmain.dll component of Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621, allowing remote attackers to exploit the software by sending a specially crafted PDF file. Successful exploitation can lead to a denial of service, causing the applications to crash or become unresponsive, thereby hindering user access to essential functionalities.

References

http://www.cnvd.org.cn/flaw/show/CNVD-2018-04657
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.