Vulnerability Description
An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this uninitialized pointer can allow an attacker to corrupt heap memory resulting in code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlantiswordprocessor | Atlantis Word Processor | 3.0.2.3 |
Related Weaknesses (CWE)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651ExploitThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651ExploitThird Party Advisory
FAQ
What is CVE-2018-3983?
CVE-2018-3983 is a vulnerability with a CVSS score of 7.8 (HIGH). An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitializ...
How severe is CVE-2018-3983?
CVE-2018-3983 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-3983?
Check the references section above for vendor advisories and patch information. Affected products include: Atlantiswordprocessor Atlantis Word Processor.