Unscored CVE-2022-25969 EUVD-2022-30541GHSA-px53-7qp6-v8p9

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary…

Published Mar 17, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: KINGSOFT JAPAN Product: The installer of WPS Office

Description

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs), allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.

Affected products

Vendor	Product	Affected	Fixed
KINGSOFT JAPAN	The installer of WPS Office	Reported for Version 10.8.0.6186	—

References

https://support.kingsoft.jp/support-info/weakness.html
JVN#21234459: Multiple vulnerabilities in KINGSOFT 'WPS Office' and 'KINGSOFT Internet Security' third-party-advisory