cve/2017/CVE-2017-2819.md

### [CVE-2017-2819](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2819)
![](https://img.shields.io/static/v1?label=Product&message=Hangul%20Word%20Processor%20in%20Thinkfree%20Office%20NEO%20Trial%20Word&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=heap-based%20buffer%20overflow&color=brighgreen)

### Description

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the context of the application. An attacker can entice a user to open up a document in order to trigger this vulnerability.

### POC

#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0320

#### Github
No PoCs found on GitHub currently.