CVE-2018-6638

CRITICAL

MathType 6.9c - Remote Code Execution via Stack-Based Buffer Overflow

Title source: llm

Description

A stack-based buffer overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. This occurs in a function call in which the first argument is a corrupted offset value and the second argument is a stack buffer. This is fixed in 6.9d.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://drive.google.com/open?id=1V-AA1InXBPhgJviabilttkaP4DYay9f6

Product, Vendor Advisory x_refsource_misc

http://www.dessci.com/en/dl/

Scores

CVSS v3 9.8

EPSS 0.0394

EPSS Percentile 89.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

wiris/mathtype 6.9c

Published Feb 28, 2018

Tracked Since Feb 18, 2026