CVE-2018-3931

In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 (6,1,2018,0312), a crafted Microsoft Word (DOC) document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the `putShapeProperty` method.

Score

CVSS 3.0 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2018-07-11

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Antenna House (Antenna House)
• Office Server Document Converter (Antennahouse)

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0598