CVE-2016-4295

When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the HncChartPlugin.hplg library. Due to a lack of bounds-checking when incrementing an index that is used for writing into a buffer for formulae, the application can be made to write pointer data outside its bounds which can lead to code execution under the context of the application.

• CWE-119

• http://www.securityfocus.com/bid/92327
• http://www.talosintelligence.com/reports/TALOS-2016-0150/Exploit, Technical Description, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/92327
• http://www.talosintelligence.com/reports/TALOS-2016-0150/Exploit, Technical Description, Third Party Advisory, VDB Entry

Published

Jan 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4289A stack based buffer overflow vulnerability exists in the me…5.5
• CVE-2016-4290When opening a Hangul HShow Document (.hpt) and processing a…
• CVE-2016-4291When opening a Hangul HShow Document (.hpt) and processing a…
• CVE-2016-4292When opening a Hangul HShow Document (.hpt) and processing a…
• CVE-2016-4293Multiple heap-based buffer overflows in the (1) CBookBase::S…
• CVE-2016-4294When opening a Hangul Hcell Document (.cell) and processing …
• CVE-2016-4296When opening a Hangul Hcell Document (.cell) and processing …
• CVE-2016-4298When opening a Hangul HShow Document (.hpt) and processing a…
• CVE-2016-4300Integer overflow in the read_SubStreamsInfo function in arch…
• CVE-2016-4301Stack-based buffer overflow in the parse_device function in …
• CVE-2016-4302Heap-based buffer overflow in the parse_codes function in ar…
• CVE-2016-4303The parse_string function in cjson.c in the cJSON library mi…9.8