This host is installed with Kingsoft Office and prone to stack based buffer overflow vulnerability.

Successful exploitation will let attacker to execute arbitrary code via a long font name in a WPS file on the target users system which can cause a stack-based buffer overflow. Impact Level: System/Application

Upgrade to Kingsoft Office version 2013 9.1.0.4256 or later, For updates refer to http://www.kingsoft.com/

The flaw is due to a boundary error when handling font names.

Kingsoft Writer 2012 8.1.0.3030 used in Kingsoft Office 2013 before 9.1.0.4256

Get the installed version of Kingsoft Office and check the version is vulnerable or not.

• http://secunia.com/advisories/53266
• http://www.securitytracker.com/id/1028920

---

Updated on 2015-03-25