Tielei Wang has discovered two vulnerabilities in Hancom Office 2010 SE, which can be exploited by malicious people to compromise a user's system.

1) An integer overflow error in the "ImportGR()" function within the JPG image filter module (HncJpeg10.flt) when allocating memory can be exploited to cause a heap-based buffer overflow via a specially crafted JPG image within a document file using overly large image dimension values.

2) An integer overflow error within the PNG image filter module (HncPng10.flt) when allocating memory can be exploited to cause a heap-based buffer overflow via a specially crafted PNG image within a document file using overly large image dimension values.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code, but requires tricking a user into opening a malicious file.

The vulnerabilities are confirmed in version 8.5.5. Other versions may also be affected.

Solution
Do not open files from untrusted sources.

Provided and/or discovered by
Tielei Wang via Secunia.

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers