Cyber Risks · Cisco Talos

Vulnerability Spotlight: Multiple vulnerabilities in Atlantis Word Processor

Summary: Cisco Talos disclosed multiple vulnerabilities in Atlantis Word Processor, a portable word processor that converts TXT, RTF, ODT, DOC, WRI, and DOCX documents into ePub eBooks, with testing covering versions 3.0.2.3, 3.0.2.5, 3.2.5.0, and 3.2.6. Talos published Snort rules covering the flaws, including ranges 47403-47412, 47456-47457, 47527-47528, 47523-47524, 47521-47522, 47758-47760, 47755-47756, and 47762-47763.

What you should know: The affected versions named here - 3.0.2.3, 3.0.2.5, 3.2.5.0, and 3.2.6 - are the ones still in use on endpoints, and a document converter that opens TXT, RTF, ODT, DOC, WRI, and DOCX files is a direct path for a malicious file to reach a user.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related