Hancom Office DOC File Parsing Type Confusion Remote Code Execution Vulnerability (CVE-2025-29867)
CVE number = CVE-2025-29867
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office.
User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DOC files.
The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition.
An attacker can leverage this vulnerability to execute code in the context of the current process.
This issue has been fixed in Word Version: 11.0.0.8916
Kerry is a Content Creator at www.systemtek.co.uk she has spent many years working in IT support, her main interests are computing, networking and AI.