CVE-2024-52035
CVE-2024-52035
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVSS 8.4 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
catdoc
- Versions
- 0.95: Affected
No fix published
catdoc Debian:12
- Versions
- 1:0.95-5
- Affected ranges
- ECOSYSTEM: < 1:0.95-6~deb12u1
Update to 1:0.95-6~deb12u1
catdoc Debian:13
- Affected ranges
- ECOSYSTEM: < 1:0.95-6
Update to 1:0.95-6
catdoc Debian:14
- Affected ranges
- ECOSYSTEM: < 1:0.95-6
Update to 1:0.95-6
catdoc Ubuntu:Pro:16.04:LTS
- Versions
- 0.94.4-1.1
- 1:0.94.3~git20151007.fd634c2+dfsg-2
- 1:0.94.3~git20151007.fd634c2+dfsg-3
- 1:0.94.3~git20160113.dbc9ec6+dfsg-1
- 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1build0.16.04.1
- Affected ranges
- ECOSYSTEM: < 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1
Update to 1:0.94.3~git20160113.dbc9ec6+dfsg-1+deb9u1ubuntu0.1~esm1
catdoc Ubuntu:Pro:18.04:LTS
- Versions
- 1:0.95-3
- 1:0.95-4.1
- Affected ranges
- ECOSYSTEM: < 1:0.95-4.1ubuntu0.18.04.1~esm1
Update to 1:0.95-4.1ubuntu0.18.04.1~esm1
catdoc Ubuntu:Pro:20.04:LTS
- Versions
- 1:0.95-4.1
- Affected ranges
- ECOSYSTEM: < 1:0.95-4.1ubuntu0.20.04.1~esm1
Update to 1:0.95-4.1ubuntu0.20.04.1~esm1
catdoc Ubuntu:Pro:22.04:LTS
- Versions
- 1:0.95-4.1
- 1:0.95-4.2
- 1:0.95-5
- Affected ranges
- ECOSYSTEM: < 1:0.95-5ubuntu0.22.04.1~esm1
Update to 1:0.95-5ubuntu0.22.04.1~esm1
catdoc Ubuntu:Pro:24.04:LTS
- Versions
- 1:0.95-5
- 1:0.95-5build1
- Affected ranges
- ECOSYSTEM: < 1:0.95-5ubuntu0.24.04.1~esm1
Update to 1:0.95-5ubuntu0.24.04.1~esm1
catdoc Ubuntu:25.10
- Versions
- 1:0.95-5build1
- 1:0.95-6
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published