Security News > 2021 > January > SoftMaker Office Vulnerabilities Allow Code Execution via Malicious Documents

SoftMaker Office Vulnerabilities Allow Code Execution via Malicious Documents
2021-01-06 15:12

Vulnerabilities discovered by Cisco Talos researchers in SoftMaker Office can be exploited for arbitrary code execution by creating malicious documents and tricking victims into opening them.

A German software developer, SoftMaker Software GmbH offers individuals and enterprises a popular office software suite that includes word processing, spreadsheet, presentation, and database software components.

The firm's SoftMaker Office suite provides support for common and internal document file formats.

The recently discovered vulnerabilities impact TextMaker, a component of the SoftMaker Office suite designed to deliver a complete set of word-processing capabilities.

SoftMaker Office 2021's TextMaker was also found to be affected by an integer overflow vulnerability.

The bugs were identified in SoftMaker Office TextMaker 2021, revision 1014, and were reported to the vendor in early October.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/uapVob5ExHE/softmaker-office-vulnerabilities-allow-code-execution-malicious-documents

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Softmaker 3 0 7 5 0 12