cvedb.io
CVE-2018-3998
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2018-10-01T20:29:01.170 · Last modified 2026-06-17T01:58:11.450

Summary

An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy data into it. An attacker must convince a victim to open a document in order to trigger this vulnerability.

Affected products

atlantiswordprocessor — atlantis_word_processor

Does this affect you?

Add your gear to cvedb and we'll alert you only when atlantiswordprocessor ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.