CVE-2018-4000

An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cause a TTableRow instance to be referenced twice, resulting in a double-free vulnerability when both the references go out of scope. An attacker must convince a victim to open a document in order to trigger this vulnerability.

• CWE-415

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0668Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0668Exploit, Technical Description, Third Party Advisory

Published

Oct 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3994An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3995An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3996An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3997An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3998An exploitable heap-based buffer overflow vulnerability exis…7.8
• CVE-2018-3999An exploitable stack-based buffer overflow vulnerability exi…7.8
• CVE-2018-4001An exploitable uninitialized pointer vulnerability exists in…7.8
• CVE-2018-4002An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2018-4003An exploitable heap overflow vulnerability exists in the mdn…9.8
• CVE-2018-4004An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4005An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2018-4006An exploitable privilege escalation vulnerability exists in …7.8