CVE-2017-11110
NONE EPSS 65.3%
Published Jul 8, 20178y ago · Modified Jun 17, 20262w ago
Published Jul 8, 2017 8y ago
Last Modified Jun 17, 2026 2w ago
Description
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.
Threat Intelligence
EPSS Exploit Probability
65.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| fossies | catdoc | 0.95 | any |
References 1
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1468471
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.