Описание
Security update for catdoc
This update for catdoc fixes the following issues:
- CVE-2017-11110: Attackers may have used specially crafted files to cause a denial of service through a heap-based buffer under-flow and application crash, or have unspecified other impact (boo#1047877)
Список пакетов
openSUSE Leap 42.2
catdoc-0.95-7.6.1
Ссылки
- E-Mail link for openSUSE-SU-2017:1899-1
- SUSE Security Ratings
Описание
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.
Затронутые продукты
openSUSE Leap 42.2:catdoc-0.95-7.6.1
Ссылки
- CVE-2017-11110
- SUSE Bug 1047877