{ "schema_version": "1.4.0", "id": "GHSA-g47x-cpw8-vm37", "modified": "2022-05-13T01:01:46Z", "published": "2022-05-13T01:01:46Z", "aliases": [ "CVE-2018-4000" ], "details": "An exploitable double-free vulnerability exists in the Office Open XML parser of Atlantis Word Processor, version 3.2.5.0. A specially crafted document can cause a TTableRow instance to be referenced twice, resulting in a double-free vulnerability when both the references go out of scope. An attacker must convince a victim to open a document in order to trigger this vulnerability.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-4000" }, { "type": "WEB", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2018-0668" } ], "database_specific": { "cwe_ids": [ "CWE-415" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-10-01T20:29:00Z" } }