What is CVE-2018-3975?

CVE-2018-3975 is a high-severity vulnerability in Atlantiswordprocessor Atlantis Word Processor, classified under Use of Uninitialized Resource. CVSS score: 7.5/10. Published 2018-10-01.

How severe is CVE-2018-3975?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Atlantiswordprocessor Atlantis Word Processor

CVE-2018-3975

An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution.

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Atlantiswordprocessor Atlantis_word_processor — versions 3.2.6
The Atlantis Word Processor Team — versions 3.2.6

Weakness classification (CWE)

CWE-908 — Use of Uninitialized Resource

References

talos-cna@cisco.com (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-3975?: CVE-2018-3975 is a high-severity vulnerability in Atlantiswordprocessor Atlantis Word Processor, classified under Use of Uninitialized Resource. CVSS score: 7.5/10. Published 2018-10-01.
How severe is CVE-2018-3975?: High severity. CVSS v3 base score is 7.5 out of 10.