Description (CNA)
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TmaxSoft Co., Ltd / ToOffice | affected unspecified through 3.15.5 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.