Description
cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office 5.3.1, as used in Huawei P2 devices before V100R001C00B043, falls back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java code by leveraging a network position between the client and the registry to block HTTPS traffic.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-401529.htm ↗
- http://www.securityfocus.com/bid/71381 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99089 ↗
- https://labs.f-secure.com/advisories/kingsoft-office-remote-code-execution/ ↗
- https://labs.f-secure.com/assets/763/original/mwri_advisory_huawei_kingsoft-office.pdf ↗