High severity · published May 13, 2024
CVE-2024-35205
The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application…
7.8
CVSS
0.8%
EPSS
No
On KEV
Description
The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names before processing them through external application interactions, leading to a form of path traversal. This potentially enables any application to dispatch a crafted library file, aiming to overwrite an existing native library utilized by WPS Office. Successful exploitation could result in the execution of arbitrary commands under the guise of WPS Office's application ID.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Wps Office · Kingsoft
before 17.0.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-35205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-35205
www.microsoft.com
https://www.microsoft.com/en-us/security/blog/2024/05/01/dirty-stream-attack-discovering-and-mitigating-a-common-vulnerability-pattern-in-android-apps/
More from Wps Office
7.8
CVE-2024-7262
Arbitrary Code Execution in WPS Office
9.3
CVE-2024-11957
Arbitrary Code Execution in WPS Office
8.1
CVE-2023-32548
OS command injection vulnerability exists in WPS Office version 10.8.0.6186
7.8
CVE-2024-7263
Arbitrary Code Execution in WPS Office
7.8
CVE-2023-31275
An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file