Description
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TmaxSoft | ToOffice | unspecified – ≤ 3.15.5 | — |