GCVE - cpe:2.3:a:fossies:catdoc:0.95:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fossies:catdoc:0.95:*:*:*:*:*:*:*

part: a version: 0.95 update: *

Vendor	Fossies (`49140689-90ca-5200-9dee-f408778d4088`)
Product	Catdoc (`639dcf82-89a5-5872-8513-babd87557e1d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/catdoc`	purl2cpe	2026-06-01 10:15:10.584867
`pkg:deb/ubuntu/catdoc`	purl2cpe	2026-06-01 10:15:10.584870
`pkg:github/petewarden/catdoc`	purl2cpe	2026-06-01 10:15:10.584874
`pkg:github/recursive/catdoc`	purl2cpe	2026-06-01 10:15:10.584878
`pkg:github/tuttinator/catdoc`	purl2cpe	2026-06-01 10:15:10.584882
`pkg:github/vbwagner/catdoc`	purl2cpe	2026-06-01 10:15:10.584886
`pkg:rpm/fedora/catdoc`	purl2cpe	2026-06-01 10:15:10.584889
`pkg:rpm/opensuse/catdoc`	purl2cpe	2026-06-01 10:15:10.584893

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-54028`	vulnerable	2026-06-08 06:54:15.935704	Details available HIGH (8.4) An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Published: 2025-06-02T15:00:15.419Z Updated: 2025-11-03T19:32:04.914Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-2132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52035`	vulnerable	2026-06-08 06:52:14.619764	Details available HIGH (8.4) An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Published: 2025-06-02T15:00:17.160Z Updated: 2025-11-03T19:31:58.018Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2024-2131	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46345`	vulnerable	2026-06-08 06:12:45.056857	Details available Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c. Published: 2023-10-25T00:00:00.000Z Updated: 2024-09-17T14:14:59.772Z Open on db.gcve.eu Reference links https://gist.github.com/rycbar77/d747b2c37b544ece30b2353a65ab41f9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41633`	vulnerable	2026-06-08 06:11:06.280617	Details available Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. Published: 2023-09-01T00:00:00.000Z Updated: 2024-10-01T13:15:18.156Z Open on db.gcve.eu Reference links https://rycbar77.github.io/2023/08/29/catdoc-0-95-nullptr-dereference/ https://gist.github.com/rycbar77/3da455382f88cfb6d6798572f34378bd	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31979`	vulnerable	2026-06-08 06:04:43.625166	Details available Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c. Published: 2023-05-09T00:00:00.000Z Updated: 2025-01-29T16:32:40.304Z Open on db.gcve.eu Reference links https://github.com/petewarden/catdoc/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11110`	vulnerable	2026-06-08 05:08:36.848227	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.