CVE-2018-3851 Memory corruption in Perceptive Document Filters

High 8.8 Published 26 Apr 2018 Updated 17 Sep 2024

A stack-based buffer overflow in Hyland Perceptive Document Filters allows remote code execution via a crafted .doc file.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-3851?

CVE-2018-3851 is a high-severity memory corruption vulnerability in Hyland Software, Inc. Perceptive Document Filters, published on 26 Apr 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. A crafted .doc document can lead to a stack-based buffer, resulting in direct code execution.

Weakness: CWE-787

Which versions are affected by CVE-2018-3851?

It affects 1 product.

Products include Hyland Perceptive Document Filters.

How do I fix CVE-2018-3851?

No fix has been published for CVE-2018-3851 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-3851 being exploited?

There is no known exploitation of CVE-2018-3851 in the wild and no public exploit code.

Sources

Also known as GHSA-p466-f3jc-jwrr.