CVE-2017-11110
HighSummary
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file.
Risk Assessment
Attackers may exploit this vulnerability to remotely trigger application crashes, potentially leading to service availability interruptions.
Recommendation
It is recommended to update to the latest version of catdoc to mitigate this vulnerability and to monitor systems for potential attack attempts.
Other vulnerabilities in catdoc 0.95
See all- CVE-2023-46345Low
Catdoc v0.95 contains a NULL pointer dereference in the xls2csv component at src/xlsparse.c. This can lead to an application crash.
- CVE-2026-111127Medium
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST records to disclose adjacent memory through xls2csv output or crash the process.
- CVE-2026-111126Medium
catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2csv to disclose adjacent process memory as CSV cells or crash the process.
Original NVD description (English source)
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS