Vulnerability Spotlight: Issue in Hancom Office 2020 could lead to code execution | allinfosecnews.com

Oct. 7, 2022, 2:11 p.m. | Jon Munshaw (noreply@blogger.com)

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence blog.talosintelligence.com

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.

Cisco Talos recently discovered an exploitable memory corruption vulnerability in Hancom Office 2020.

Hancom Office is a popular software collection among South Korean users that offers similar products to Microsoft Office, such as word processing and spreadsheet creation and management.

TALOS-2022-1574 (CVE-2022-33896) exists in the way the Hword word processing software processes XML files. An attacker could exploit this vulnerability by tricking the user into opening a …

code code execution office spotlight vulnerability vulnerability spotlight

More from blog.talosintelligence.com / Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

What can we learn from the passwords used in brute-force attacks? 4 days, 3 hours ago | blog.talosintelligence.com

attacks brute brute-force can +5

Vulnerabilities in employee management system could lead to remote code execution, login credential theft 5 days, 5 hours ago | blog.talosintelligence.com

code code execution credential credential theft +21

Cisco Talos at RSAC 2024 6 days, 9 hours ago | blog.talosintelligence.com

announcements cisco cisco talos cybersecurity +12

James Nutland studies what makes threat actors tick, growing our understanding of the current APT … 1 week ago | blog.talosintelligence.com

adversary apt can current +14

The private sector probably isn’t coming to save the NVD 1 week, 4 days ago | blog.talosintelligence.com

arcanedoor coming cybercrime isn +9

Talos IR trends: BEC attacks surge, while weaknesses in MFA persist 1 week, 4 days ago | blog.talosintelligence.com

adversaries attacks bec bec attacks +17

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices 1 week, 5 days ago | blog.talosintelligence.com

apt campaign campaigns devices +15

Suspected CoralRaider continues to expand victimology using three information stealers 1 week, 6 days ago | blog.talosintelligence.com

apt argument bypass command +17

What’s the deal with the massive backlog of vulnerabilities at the NVD? 2 weeks, 3 days ago | blog.talosintelligence.com

backlog current deal management +10

Principal - Cyber Risk and Assurance - Infra/Network

@ GSK | Bengaluru Luxor North Tower

View on infosec-jobs.com

Staff Security Engineer

@ Airwallex | AU - Melbourne

View on infosec-jobs.com

Chief Information Security Officer

@ Australian Payments Plus | Sydney, New South Wales, Australia

View on infosec-jobs.com

TW Test Automation Engineer (Access Control & Intrusion Systems)

@ Bosch Group | Taipei, Taiwan

View on infosec-jobs.com

Consultant infrastructure sécurité H/F

@ Hifield | Sèvres, France

View on infosec-jobs.com

SOC Analyst

@ Wix | Tel Aviv, Israel

View on infosec-jobs.com