CVE-2018-3998

An exploitable heap-based buffer overflow vulnerability exists in the Windows enhanced metafile parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted image embedded within a document can cause an undersized allocation, resulting in an overflow when the application tries to copy data into it. An attacker must convince a victim to open a document in order to trigger this vulnerability.

• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0666Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0666Exploit, Technical Description, Third Party Advisory

Published

Oct 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3992An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3993An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3994An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3995An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3996An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3997An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3999An exploitable stack-based buffer overflow vulnerability exi…7.8
• CVE-2018-4000An exploitable double-free vulnerability exists in the Offic…7.8
• CVE-2018-4001An exploitable uninitialized pointer vulnerability exists in…7.8
• CVE-2018-4002An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2018-4003An exploitable heap overflow vulnerability exists in the mdn…9.8
• CVE-2018-4004An exploitable privilege escalation vulnerability exists in …5.5