Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2021-26618

Tmax ToOffice arbitrary file creation vulnerability

Description

An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TmaxSoft Co., Ltd ToOffice

  • unspecified to ≤ 3.15.5affected

References