Skip to content
OpenAdvisories

Package · Debian

catdoc

14 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1

    catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string

    catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte …

  • Medium 6.1

    catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

    catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or…