Описание
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:0.95-6build1 |
| esm-apps-legacy/xenial | released | 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 1:0.95-4.1ubuntu0.18.04.1~esm1 |
| esm-apps/focal | released | 1:0.95-4.1ubuntu0.20.04.1~esm1 |
| esm-apps/jammy | released | 1:0.95-5ubuntu0.22.04.1~esm1 |
| esm-apps/noble | released | 1:0.95-5ubuntu0.24.04.1~esm1 |
| esm-apps/resolute | not-affected | 1:0.95-6build1 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| focal | ignored | end of standard support, was needs-triage |
| jammy | needed |
Показывать по
7.8 High
CVSS3
Связанные уязвимости
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
An integer overflow vulnerability exists in the OLE Document File Allo ...
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Уязвимость компонента OLE Document File Allocation Table Parser программы извлечения читаемого текста из файлов MS-Word catdoc, позволяющая нарушителю выполнить произвольный код
7.8 High
CVSS3