Code execution vulnerabilities uncovered in Atlantis Word Processor

guest · Oct 1, 2018

Code execution vulnerabilities uncovered in Atlantis Word Processor
The software is used for creating Word documents and converting documents in a variety of formats
October 1, 2018
https://www.zdnet.com/article/code-execution-bugs-plague-atlantis-word-processor/

Researchers have uncovered a slew of critical vulnerabilities in the Atlantis Word Processor which permit attackers to execute code.

On Monday, security researchers from Cisco Talos disclosed the bugs, which were found in Atlantis Word Processor versions 3.0.2.3, 3.2.5.0, and 3.2.6.

The first vulnerability impacts versions 3.0.2.3 and 3.0.2.5. Tracked as CVE-2018-3975, the uninitialized variable vulnerability was uncovered in the RTF-parsing functionality of the software.
[...] The second bug, CVE-2018-3978, is another exploitable out-of-bounds write vulnerability. [...] The third bug, CVE-2018-3982, is a flaw which exists in the Atlantis Word Document parser [...]
Click to expand...

guest · Nov 20, 2018

3 New Code Execution Flaws Discovered in Atlantis Word Processor
November 20, 2018
https://thehackernews.com/2018/11/word-processor-vulnerability.html

Just 50 days after disclosing 8 code execution vulnerabilities in previous versions of Atlantis Word Processor, Talos team today revealed details and proof-of-concept exploits for 3 more remote code execution vulnerabilities in the application.

All the three vulnerabilities, listed below, allow attackers to corrupt the application's memory and execute arbitrary code under the context of the application.

Incorrect Calculation of Buffer Size (CVE-2018-4038) [...] Improper Validation of Array Index (CVE-2018-4039) [...] Use of Uninitialized Variable (CVE-2018-4040)
All these vulnerabilities affect Atlantis Word Processor versions 3.2.7.1, 3.2.7.2 and can be exploited by convincing a victim into opening a specially crafted malicious booby-trapped document.

If you haven’t yet, you are highly advised to update your word processing software to the latest version and security enthusiasts who are interested in learning more about these issues can head on to Talos blog for technical details.
Click to expand...

Log in or Sign up

Code execution vulnerabilities uncovered in Atlantis Word Processor

guest Guest

guest Guest

Log in or Sign up

Code execution vulnerabilities uncovered in Atlantis Word Processor

guest Guest

guest Guest

Useful Searches