CVE-2022-25969
N/A
N/A
Summary
The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| KINGSOFT JAPAN, INC. | The installer of WPS Office | Reported for Version 10.8.0.6186 | affected |
Weaknesses
- CWE-427: CWE-427: insecurely loading Dynamic Link Libraries
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.