Security Advisory

CVE-2018-3975

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-01 20:00:00

Last updated 2024-09-16 18:14:34

Assigner talos

CVSS score 7.5

State PUBLISHED

Description

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution.

← Browse all CVEs View on cve.org ↗