Description (CNA)
An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351. A specially-crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WPS / WPS Office | affected 11.2.0.10351 |
CWE
CWE-416
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1412
- https://security.wps.cn/notices/28
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.