Skip to content
OpenAdvisories
High · 7.5 CVE-2018-3975 EUVD-2018-15761GHSA-6wh2-mpvp-28q3

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A spe…

Published Oct 1, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution.

Affected products

VendorProductAffectedFixed
The Atlantis Word Processor Team Atlantis Word Processor 3.2.6 —

References