CVE-2018-4039: atlantiswordprocessor atlantis_word_processor Out-of-bounds Write

Vulnerability summary

CVE-2018-4039 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in atlantiswordprocessor atlantis_word_processor. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 01-12-2018
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.