CVE-2016-8382

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary code execution. An attacker can send a malicious doc file to trigger this vulnerability.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Apr 24, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-83838.8An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafte CVE-2016-83848.8An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter.CVE-2016-83857.8An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to CVE-2016-83867.8An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the t CVE-2016-83877.8An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multi CVE-2016-83887.8An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will CVE-2016-83897.8An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt CVE-2016-83907.8An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially cr CVE-2016-83917.0An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi CVE-2016-83927.0An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wi CVE-2016-83937.0An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary CVE-2016-83947.0An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary