CVE-2022-25969 — KINGSOFT JAPAN, INC. / The installer of WPS Office

CVE-2022-25969

KINGSOFT JAPAN, INC. / The installer of WPS Office PUBLISHED

Description (CNA)

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected (CNA)

Vendor / product	Versions
KINGSOFT JAPAN, INC. / The installer of WPS Office	affected Reported for Version 10.8.0.6186

CWE

CWE-427

References

https://support.kingsoft.jp/support-info/weakness.html
https://jvn.jp/en/jp/JVN21234459/

ADP enrichment

CVE

No English description supplied.

https://support.kingsoft.jp/support-info/weakness.html
https://jvn.jp/en/jp/JVN21234459/