Vulnerability · Published Mar 17, 2022 · Assigned by jpcert
CVE-2022-25949
High 7.8
In plain English
A high-severity stack buffer overflow in KINGSOFT Internet Security 9 Plus from KINGSOFT JAPAN, INC.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.8%top 44.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KINGSOFT JAPAN, INC. | KINGSOFT Internet Security 9 Plus | Reported for Version 2010.06.23.247 |
Weakness: CWE-121
References
- https://support.kingsoft.jp/support-info/weakness.html x_refsource_CONFIRM
- JVN#21234459: Multiple vulnerabilities in KINGSOFT 'WPS Office' and 'KINGSOFT Internet Security' third-party-advisory, x_refsource_JVN