Kingsoft Office remote code execution vulnerability in CVE-2014-2271)

Kingsoft Office remote code execution vulnerability in CVE-2014-2271)

Release date: 2014-12-01
Updated on: 2014-3 3

Affected Systems:
Kingsoft Corp Office 5.3.1
Description:
Bugtraq id: 71381
CVE (CAN) ID: CVE-2014-2271

Kingsoft Office is a free Office software package, including Writer, Presentation, and Spreadsheets.

Kingsoft Office 5.3.1 and other versions have security vulnerabilities. Successful exploitation of this vulnerability allows attackers to execute man-in-the-middle attacks and execute arbitrary code in the affected application context.

<* Source: Rob Miller
*>

Suggestion:
Vendor patch:

Kingsoft Corp
-------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kingsoft.com/

This article permanently updates the link address: