VULNERABILITY INTELLIGENCE

CVE-2018-3851

CVSS score8.8 HIGH

EPSS probability2.64%

CISA KEVNot currently listed

Published2018-04-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. A crafted .doc document can lead to a stack-based buffer, resulting in direct code execution.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

talos-cna@cisco.com — Third Party Advisory, VDB Entry
talos-cna@cisco.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory