TI-2024-36181 CVE-2024-54028 · GHSA-h628-q67p-f6w4
Integer underflow in catdoc
Priority HIGH 72
An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95.
catdoc
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
catdoc records in CISA KEVNo catdoc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-34920 CVE-2024-52035 · GHSA-vpgx-c322-qgw5
Integer overflow in catdoc
Priority HIGH 72
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95.
Priority MEDIUM 64
catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column.
Priority LOW 29
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count.
TI-2003-00179 CVE-2003-0193 · GHSA-27q9-g54w-g6cm
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite…
Priority LOW 11
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").