CVE-2012-1206: Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code...

Security readout for executives and security teams

CVE-2012-1206 is a legacy Hancom Office 2010 SE issue where specially crafted JPG or PNG images with large dimensions can corrupt memory and potentially run attacker-controlled code. Business risk depends almost entirely on whether Hancom Office 2010 SE 8.5.5 is still installed and used with untrusted files. Exposure is likely limited to environments still running Hancom Office 2010 SE 8.5.5, especially users who open or import JPG/PNG content from email, web downloads, file shares, or external partners. Prioritize this as high only where Hancom Office 2010 SE remains deployed. The vulnerability enables code execution through file handling, but the public bundle does not show active exploitation or provide a CVSS score. Mitigation focus: Inventory for Hancom Office 2010 SE 8.5.5 installations.; Check Hancom guidance for updates, replacement versions, or vendor mitigations.; Remove or isolate unsupported legacy Hancom Office deployments..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.