cve/2018/CVE-2018-12589.md

CVE-2018-12589

Description

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.

POC

Reference

• http://packetstormsecurity.com/files/148312/Polaris-Office-2017-8.1-Remote-Code-Execution.html
• https://www.exploit-db.com/exploits/44985/

Github

• https://github.com/rudinyu/KB