Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0640
CVE ID: CVE-2018-3975 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-16T18:14:34.796Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0641
CVE ID: CVE-2018-3976 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-17T00:56:15.077Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: ACD Systems Problem Types: Out of bounds write code execution Description: An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially crafted CAL image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a CAL image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.
this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106809 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0642
CVE ID: CVE-2018-3977 State: PUBLISHED Published: 2018-11-01T15:00:00Z Last Updated: 2024-09-17T02:33:07.107Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Simple DirectMedia Layer Products: Simple DirectMedia Layer Problem Types: Heap-based Buffer Overflow Description: An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201903-17 - https
ity. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201903-17 - https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html - https://usn.ubuntu.com/4238-1/ - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0645
CVE ID: CVE-2018-3978 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-17T00:00:53.941Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: heap-based buffer overflow Description: An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A specially crafted document can cause Atlantis to write a value outside the bounds of a heap allocation, resulting in a buffer overflow. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Note
w. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0646
CVE ID: CVE-2018-3979 State: PUBLISHED Published: 2019-04-01T20:10:28 Last Updated: 2024-08-05T04:57:24.572Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H) Vendors: Nouveau Products: Nouveau Problem Types: denial of service Description: A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is re
his vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload). Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647
CVE ID: CVE-2018-3980 State: PUBLISHED Published: 2019-02-06T21:00:00Z Last Updated: 2024-09-17T01:25:44.448Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: ACD Systems Problem Types: Out of bounds write code execution Description: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/v
nd gain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0648
CVE ID: CVE-2018-3981 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-17T00:50:44.146Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: ACD Systems Problem Types: Out of bounds write code execution Description: An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106809 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651 - https://talosintelligence.com/vulnerability_
809 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0649
CVE ID: CVE-2018-3982 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-17T02:16:00.461Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: remote code execution Description: An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can prevent Atlas from adding elements to an array that is indexed by a loop. When reading from this array, the application will use an out-of-bounds index which can result in arbitrary data being read as a pointer. Later, when the
application will use an out-of-bounds index which can result in arbitrary data being read as a pointer. Later, when the application attempts to write to said pointer, an arbitrary write will occur. This can allow an attacker to further corrupt memory, which leads to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0650
CVE ID: CVE-2018-3983 State: PUBLISHED Published: 2019-10-31T20:32:56 Last Updated: 2024-08-05T04:57:24.610Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Atlantis Word Processor Problem Types: Unchecked error condition Description: An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafted document can cause an array fetch to return an uninitialized pointer and then performs some arithmetic before writing a value to the result. Usage of this uninitialized pointer can allow an attacker to corrupt heap memory resulting in code execution under the context of the ap
initialized pointer can allow an attacker to corrupt heap memory resulting in code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651
CVE ID: CVE-2018-3984 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-16T19:05:33.319Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: heap-based buffer overflow Description: An exploitable uninitialized length vulnerability exists within the Word document-parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specially crafted document can cause Atlantis to skip initializing a value representing the number of columns of a table. Later, the application will use this as a length within a loop that will write to a pointer on the heap. Due to this value
er, the application will use this as a length within a loop that will write to a pointer on the heap. Due to this value being controlled, a buffer overflow will occur, which can lead to code execution under the context of the application. An attacker must convince a victim to open a document in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0652
CVE ID: CVE-2018-3985 State: PUBLISHED Published: 2019-03-21T15:30:19 Last Updated: 2024-08-05T04:57:24.467Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: CUJO Problem Types: double-free Description: An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vu
er this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653
CVE ID: CVE-2018-3986 State: PUBLISHED Published: 2019-01-03T23:00:00 Last Updated: 2024-08-05T04:57:24.563Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Telegram Problem Types: Exposure of Private Information Description: An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. The "Secret Chats" functionality allows a user to delete all traces of a chat, either by using a time trigger or by direct request. There is a bug in this functionality that leaves behind photos taken and shared on the secret chats, even after the chats are deleted. The
this functionality that leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106295 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0654
CVE ID: CVE-2018-3987 State: PUBLISHED Published: 2020-02-12T23:36:14 Last Updated: 2024-08-05T04:57:24.559Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Rakuten Viber Problem Types: information disclosure Description: An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Android 9.3.0.6. The 'Secret Chats' functionality allows a user to delete all traces of a chat either by using a time trigger or by direct request. There is a bug in this functionality which leaves behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in
es behind photos taken and shared on the secret chats, even after the chats are deleted. These photos will be stored in the device and accessible to all applications installed on the Android device. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0655
CVE ID: CVE-2018-3988 State: PUBLISHED Published: 2018-12-10T17:00:00 Last Updated: 2024-08-05T04:57:24.494Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Signal Problem Types: privacy violation Description: Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106207 - https://www.talosintelligence.com/vulnerability_r
ram Container: References: - http://www.securityfocus.com/bid/106207 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0656
CVE ID: CVE-2018-3989 State: PUBLISHED Published: 2019-02-05T22:00:00 Last Updated: 2024-08-05T04:57:24.561Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107005 -
lnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107005 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0657 - https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
CVE ID: CVE-2018-3990 State: PUBLISHED Published: 2019-02-05T22:00:00 Last Updated: 2024-08-05T04:57:24.697Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
r this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107005 - https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0658
CVE ID: CVE-2018-3991 State: PUBLISHED Published: 2019-02-05T22:00:00 Last Updated: 2024-08-05T04:57:24.691Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107005 - https://cert-portal.siemens.com
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107005 - https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659
CVE ID: CVE-2018-3992 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-16T23:37:00.210Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a mal
ser to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0660
CVE ID: CVE-2018-3993 State: PUBLISHED Published: 2018-10-03T15:00:00Z Last Updated: 2024-09-17T03:33:39.245Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a mali
er to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0661
CVE ID: CVE-2018-3994 State: PUBLISHED Published: 2018-10-03T15:00:00Z Last Updated: 2024-09-16T23:50:41.471Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a mali
er to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0662
CVE ID: CVE-2018-3995 State: PUBLISHED Published: 2018-10-03T15:00:00Z Last Updated: 2024-09-16T17:44:13.402Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious
open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0663
CVE ID: CVE-2018-3996 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-17T03:47:40.481Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious
open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0664
CVE ID: CVE-2018-3997 State: PUBLISHED Published: 2018-10-08T16:00:00Z Last Updated: 2024-09-16T18:55:21.110Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a mal
ser to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041769 - https://talosintelligence.com/vulnerability_reports/TALOS-2018-0665
CVE ID: CVE-2018-3998 State: PUBLISHED Published: 2018-10-01T20:00:00Z Last Updated: 2024-09-16T23:56:43.619Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Atlantis Word Processor Team Products: Atlantis Word Processor Problem Types: heap-based buffer overflow Description: An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy data into it. An attacker must convince a victim to open a document in order to trigger thi