WPS Office confirms that there is a code execution vulnerability through which an attacker can take control of his computer

Thanks to CTOnews.com netizens JohnGo and Xiao Xing _ 14 for the clue delivery! CTOnews.com August 11 news, WPS recently issued a security notice confirming that there is a code execution vulnerability in WPS Office, and users are advised to update to the latest version.

According to WPS officials, an attacker specifically constructed a malicious document using this vulnerability, and after the victim opened the document and performed the appropriate action, the victim would download malicious code from a remote server to a specified directory and execute it, provided that the current user of the system had write access to the directory, and the attacker then took control of his computer.

Scope of influence:

WPS Office personal Edition, Windows platform, version number less than 12.1.0.15120 (included)

WPS Office institutional version (e.g. professional version, professional enhanced version), Windows platform, version number lower than 11.8.2.12055 (included)

If you are using WPS Office personal version, you can obtain the latest version through the official website of WPS to upgrade. If you are using WPS office institutional version (such as professional version or professional enhanced version), you can contact your account manager or official to obtain the latest version.

WPS official contact information is attached to CTOnews.com.

Customer service hotline: 400,677-5005

Customer service email: wps@wps.cn

Official account of Wechat: WPS customer service