Vulnerabilities > CVE-2018-3936 - Out-of-bounds Write vulnerability in Antennahouse Office Server Document Converter 6.1

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution.

Vulnerable Configurations

Part Description Count
Application
Antennahouse
1
OS
Linux
1

Common Weakness Enumeration (CWE)

Talos

idTALOS-2018-0603
last seen2019-05-29
published2018-07-10
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0603
titleAntenna House Office Server Document Converter GetShapePropery 0x105 code execution vulnerability