CVE-2014-2271

Name of the Vulnerable Software and Affected Versions Kingsoft Office version 5.3.1 Huawei P2 devices before V100R001C00B043

Description The issue allows man-in-the-middle attackers to conduct downgrade attacks and execute arbitrary Java code by leveraging a network position between the client and the registry to block HTTPS traffic. This occurs because the cn.wps.moffice.common.beans.print.CloudPrintWebView in Kingsoft Office falls back to HTTP when the HTTPS connection to the registry fails.

Recommendations For Kingsoft Office version 5.3.1, consider disabling the CloudPrintWebView functionality until a patch is available to prevent potential downgrade attacks. For Huawei P2 devices before V100R001C00B043, update to a version after V100R001C00B043 to resolve the issue.