2 results · Clear filters · Feed
-
Medium 6.1
catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte …
-
Medium 6.1
catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler
catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or…