CVE-2018-4038 Memory corruption in Atlantis Word Processor
An attacker can execute arbitrary code by tricking a user into opening a specially crafted document in Atlantis Word Processor due to a memory corruption flaw.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-4038?
CVE-2018-4038 is a high-severity memory corruption vulnerability in Talos Atlantis Word Processor, published on 1 Dec 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This constructor will miscalculate a length and then use it to calculate the position to write a null byte. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.
Weakness: CWE-131
Which versions are affected by CVE-2018-4038?
It affects 1 product.
Products include Atlantiswordprocessor Atlantis Word Processor.
How do I fix CVE-2018-4038?
No fix has been published for CVE-2018-4038 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-4038 being exploited?
There is no known exploitation of CVE-2018-4038 in the wild and no public exploit code.
Other vulnerabilities in Talos Atlantis Word Processor
Sources
Also known as GHSA-g3f8-q8cx-jm7w.