CVE-2018-6640

CRITICAL

MathType 6.9c - Heap Overflow Remote Code Execution

Title source: llm

Description

A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://drive.google.com/open?id=1jIKf-EgP4qD-VmNHM1LbWGLbJLOClDim

Product, Vendor Advisory x_refsource_misc

http://www.dessci.com/en/dl/

Scores

CVSS v3 9.8

EPSS 0.0394

EPSS Percentile 89.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (1)

wiris/mathtype 6.9c

Published Feb 28, 2018

Tracked Since Feb 18, 2026