CVE-2018-6640 A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d.
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Heap Overflow (Remote Code Execution) issue was discovered in Design Science MathType 6.9c. Crafted input can modify the next pointer of a linked list. This is fixed in 6.9d.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wiris mathtype | = 6.9c | No fix listed |
References
- www.dessci.com product vendor-advisory
- drive.google.com exploit third-party-advisory