GCVE - cpe:2.3:a:catdoc:catdoc:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:catdoc:catdoc:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Catdoc (`7fbc1d04-b5c4-577d-99f5-2f9bc61e8a2c`)
Product	Catdoc (`3240c8c5-0e5c-546d-bdf4-e1e6b6a5bab0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/catdoc`	purl2cpe	2026-06-01 10:13:17.134438
`pkg:deb/ubuntu/catdoc`	purl2cpe	2026-06-01 10:13:17.134440
`pkg:github/petewarden/catdoc`	purl2cpe	2026-06-01 10:13:17.134442
`pkg:rpm/fedora/catdoc`	purl2cpe	2026-06-01 10:13:17.134443
`pkg:rpm/opensuse/catdoc`	purl2cpe	2026-06-01 10:13:17.134445

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-111126`	vulnerable	2026-11-03 10:16:10.608787	catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler MEDIUM (6.1) catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2csv to disclose adjacent process memory as CSV cells or crash the process. Published: 2026-10-15T18:57:22.717Z Updated: 2026-10-15T19:54:23.491Z Open on db.gcve.eu Reference links https://hackmd.io/@haind-pwn/catdoc-xls-mulrk-endcol-and-string-count-oob-read https://github.com/vbwagner/catdoc/blob/38a2807d22ce1a08bc39b94e9072a9f8f52cd86f/src/xlsparse.c#L314-L328 https://github.com/vbwagner/catdoc https://www.vulncheck.com/advisories/catdoc-through-0.95-out-of-bounds-read-in-xls2csv-mulrk-record-handler	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54028`	vulnerable	2026-06-08 06:54:15.934861	Details available HIGH (8.4) An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Published: 2025-06-02T15:00:15.419Z Updated: 2025-11-03T19:32:04.914Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-2132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52035`	vulnerable	2026-06-08 06:52:14.618826	Details available HIGH (8.4) An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Published: 2025-06-02T15:00:17.160Z Updated: 2025-11-03T19:31:58.018Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-2131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0193`	vulnerable	2026-06-08 04:47:20.965232	Details available msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html"). Published: 2004-06-03T04:00:00.000Z Updated: 2024-08-08T01:43:36.094Z Open on db.gcve.eu Reference links http://www.osvdb.org/11193 http://www.securityfocus.com/bid/11560 http://secunia.com/advisories/13021/ http://secunia.com/advisories/13022/ https://exchange.xforce.ibmcloud.com/vulnerabilities/16335	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Catdoc

Notes

PURL mappings

Vulnerability references

Contribute