What’s Vulnerable › Vulnerabilities

CVE-2018-4040

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-01 · updated 2026-06-17
• Weakness: CWE-824

Description

An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.

Affected products

• The Atlantis Word Processor Team Atlantis Word Processor: 3.2.7.2

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0713
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0713

Get alerted when CVE-2018-4040 or the next vulnerability affects your stack