CVE-2020-25291

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document

published September 13, 2020

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document. This is related to QBrush::setMatrix in gui/painting/qbrush.cpp in Qt 4.x.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01617 · 75.8th percentile
Published
2020-09-13T19:35Z
EPSS history
Timeline
  • 13 SEP 19:35Z
    GdiDrawHoriLineIAlt in Kingsoft WPS Office before 11.2.0.9403 allows remote heap corruption via a crafted PLTE chunk in PNG data within a Word document
    cvelistv5