KLA10239 Multiple vulnerabilities in KIWI CatTools

A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities

1. A directory traversal vulnerability can be exploited remotely via a specially designed pathname;
2. Weak encryption of sensitive information can be exploited locally via decryption.

Original advisories

Related products

Kiwi-CatTools

CVE list

CVE-2007-0889 warning

CVE-2007-0888 critical

Solution

Update to latest version

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Kiwi CatTools versions 3.1.9 and earlier