CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2015-6585
High (7.8) in hancom hangul word processor. EPSS 2.5% chance of exploitation in the next 30 days.
hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag.
Severity
- EPSS
- 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hancom:hangul_word_processor
References
- http://www.hancom.com/cs_center/csDownload.do
- http://www.securityfocus.com/bid/76694
- https://www.fireeye.com/blog/threat-research/2015/09/zero-day_hwp_exploit.html
- https://www.fireeye.com/content/dam/fireeye-www/global/en/blog/threat-research/FireEye_HWP_ZeroDay.pdf
- http://www.hancom.com/cs_center/csDownload.do