PT-2018-16371

Name of the Vulnerable Software and Affected Versions Atlantis Word Processor version 3.2.7.2 Description The issue is related to an arbitrary write vulnerability in the open document format parser. It occurs when the parser attempts to null-terminate a string, allowing an attacker to pass an...

CVE-2018-4038: Incorrect Calculation of Buffer Size

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This...