CVE-2018-3982

CVE-2018-3982 is an exploitable arbitrary write vulnerability in the Atlantis Word Processor (Word Document parser). Cisco Talos reports that Atlantis Word Processor 3.0.2.3 and 3.0.2.5 can be induced to skip adding elements to a loop-indexed array, causing an out-of-bounds read of a pointer and,...

CVE-2018-3984

CVE-2018-3984 affects Atlantis Word Processor 3.0.2.3 and 3.0.2.5. The Word Document parser has an uninitialized length (SprmTDefTable) for the number of table columns, which is later used as a loop bound. A crafted Word doc can trigger a heap-based buffer overflow, leading to code execution unde...

CVE-2018-3978

CVE-2018-3978 is a vulnerability in Atlantis Word Processor’s Word Document parser (CLX/Clx handling in the Fib-based WordDocument table). A specially crafted Word binary (DOC) document can trigger a heap-based buffer overflow by mis-processing the Clx/Pcdt piece-descriptor table: the Clx.lcb con...

CVE-2018-3978

An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince ...

CVE-2018-3984: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can cause Atlantis to skip initializing a value representing the number of columns of a table. Later, the application will use...

CVE-2018-3978: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince ...

CVE-2018-3982: Out-of-bounds Write

An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an...

PT-2018-16354

Name of the Vulnerable Software and Affected Versions Atlantis Word Processor versions 3.0.2.3 through 3.0.2.5 Description The issue is related to an out-of-bounds write in the Word Document parser. A specially crafted document can cause the software to write a value outside the bounds of a heap...

Atlantis Word Processor Word Document Complex Piece Descriptor Table Fc.Compressed Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince a victim ...

Highly Sophisticated Parasite RAT Emerges on the Dark Web

Researchers are tracking a remote access trojan RAT on underground markets that, so far, has only been attributed to one small malicious email campaign. However, the RAT, dubbed Parasite HTTP by the Proofpoint researchers that discovered it, has an impressive list of sophisticated features –...

Antenna House Office Server Document Converter for Linux64 Remote Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 Stack Buffer Overflow Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

Antenna House Office Server Document Converter for Linux64 'putShapeProperty' Method Code Execution Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

CVE-2018-3936

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution...

CVE-2018-3930

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the vbgetfp method...

CVE-2018-3933

An exploitable out-of-bounds write exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote cod...

CVE-2018-3931

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the putShapeProperty method...

PT-2018-16325

Name of the Vulnerable Software and Affected Versions Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312 Description An out-of-bounds write issue exists in the Microsoft Word document conversion functionality. A crafted Microsoft Word document can cause...

PT-2018-16328

Name of the Vulnerable Software and Affected Versions Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312 Description A crafted Microsoft Word document can lead to an out-of-bounds write, resulting in remote code execution. Recommendations For Antenna Hou...

CVE-2018-3932: Out-of-bounds Write

An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to a stack-based buffer overflow, resultin...