TI-2024-36181 CVE-2024-54028 · GHSA-h628-q67p-f6w4
Integer underflow in catdoc
Priority HIGH 72
An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95.
Fossies
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Fossies records in CISA KEVNo Fossies vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Catdoc · all components
TI-2024-34920 CVE-2024-52035 · GHSA-vpgx-c322-qgw5
Integer overflow in catdoc
Priority HIGH 72
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95.
TI-2023-15296 CVE-2023-31979 · GHSA-3rq8-339r-782q
Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.
Priority HIGH 67
Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.
TI-2023-24941 CVE-2023-46345 · GHSA-qp9j-3hxc-wm7p
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
Priority MEDIUM 40
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c.
TI-2017-08171 CVE-2017-11110 · GHSA-63c4-r8fh-c85j
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial…
Priority LOW 37
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., d…
TI-2023-22065 CVE-2023-41633 · GHSA-pm5p-ff9q-6v54
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.
Priority LOW 24
Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c.