CVE-2016-4291

CVE-2016-4291 is an integer overflow vulnerability affecting Hancom Office 2014 when processing specially crafted Hangul HShow Documents (.hpt). This flaw allows an attacker to trigger an undersized memory allocation, leading to an out-of-bounds write and potential arbitrary code execution. Rated with a CVSS score of 7.8 (High), it requires user interaction (opening a malicious file) but has low attack complexity, potentially resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.