In module wpsio.dll in WPS Office, a BSTR string stored in the file is copied to the stack buffer without strict length inspection leading to a stack buffer overflow. Proof of concept included.
2903a1aaee327cb030f2a2a6375ab875
© 2020 Packet Storm. All rights reserved.