Archive
1 October 2018
Vulnerabilities first published on this day (UTC), newest first.
11 results · Clear filters · Feed
-
High 8.8
An exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of Atlantis Word Processor, ver…
-
High 8.8
An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5…
-
High 8.8
An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.…
-
High 8.8
An exploitable stack-based buffer overflow vulnerability exists in the JPEG parser of Atlantis Word Processor, version …
-
High 8.8
An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 …
-
High 8.8
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker c…
-
High 8.8
An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor…
-
High 7.5
An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor …
-
High 8.8
An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word…
-
High 7.5
golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, durin…
-
High 7.5
x/net/html Vulnerable to DoS During HTML Parsing
The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.