CVE-2018-4001: atlantiswordprocessor atlantis_word_processor Access of Uninitialized Pointer

Vulnerability summary

CVE-2018-4001 is a high (CVSS 8.8) Access of Uninitialized Pointer vulnerability in atlantiswordprocessor atlantis_word_processor. EPSS estimates a 1.46% chance of exploitation in the next 30 days, higher than 73.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 01-10-2018
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

An exploitable uninitialized pointer vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cause an uninitialized pointer representing a TTableRow to be assigned to a variable on the stack. This variable is later dereferenced and then written to allow for controlled heap corruption, which can lead to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.

• CWE-824Access of Uninitialized PointerThe product accesses or uses a pointer that has not been initialized.