Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2020-25291: GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/...
CVE-2020-25291 · published 6 years ago
Summary
GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.
What to do
- Update kingsoft wps_office to version 11.2.0.9403 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| kingsoft | wps_office |
< 11.2.0.9403 cpe:2.3:a:kingsoft:wps_office:*:*:*:*:*:*:*:* |
Original advisory text
GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/...
GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.
References
- http://zeifan.my/security/rce/heap/2020/09/03/wps-rce-heap.html Exploit Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-787Out-of-bounds Write
Timeline
Published13 Sep 2020
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-25291 · NVD
Track software like this
Free during beta