Lucene search
+L

25 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/20 12:00 a.m.•9 views

MULRK Handler Process Item Unauthorized Access Service Failures

The vulnerability of the processitem handler in the MULRK program for extracting readable text from MS-Word catdoc files is related to reading beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause...

6.1CVSS6.5AI score0.00197EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2026/10/16 12:00 a.m.•12 views

UBUNTU-CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-111126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/15 7:17 p.m.•19 views

DEBIAN-CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/15 7:17 p.m.•9 views

CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS0.00197EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/10/15 7:17 p.m.•5 views

CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/15 6:57 p.m.•35 views

CVE-2026-111126 catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS0.00197EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/15 6:57 p.m.•18 views

CVE-2026-111126

The catdoc software (versions through 0.95 ) is vulnerable to an out-of-bounds read in the MULRK record handler of the process_item() function located in src/xlsparse.c. An attacker can supply a specially crafted .xls workbook or BIFF stream with a large endcol value to the xls2csv utility. This ...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/15 6:57 p.m.•9 views

EUVD-2026-102357

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/15 6:57 p.m.•8 views

CVE-2026-111126 catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/15 6:57 p.m.•5 views

CVE-2026-111126 catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6AI score
SaveExploits0References7
Mend
Mend
•added 2026/10/15 6:57 p.m.•8 views

CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•7 views

CVE-2026-111126: Out-of-bounds Read

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•7 views

PT-2026-120367

Уязвимость функции process item обработчика MULRK программы извлечения читаемого текста из файлов MS-Word catdoc связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации или вызват...

6.9CVSS6.3AI score0.00197EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•11 views

PT-2026-115132

Name of the Vulnerable Software and Affected Versions catdoc versions 0.95 and earlier Description An out-of-bounds read exists in the process item function within the MULRK record handler in src/xlsparse.c. This occurs when the software processes a crafted .xls workbook or BIFF stream containing...

6.9CVSS6.2AI score0.00197EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2017-12109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS fi...

8.8CVSS8.4AI score0.02677EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2018/04/24 7:29 p.m.•30 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.3AI score0.02677EPSS
SaveExploits2References1
NVD
NVD
•added 2018/04/24 7:29 p.m.•34 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.1AI score0.02677EPSS
SaveExploits2References1
osv_ubuntu
osv_ubuntu
•added 2018/04/24 7:29 p.m.•34 views

UBUNTU-CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS6.2AI score0.02677EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2018/04/24 7:29 p.m.•26 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS7.3AI score0.02677EPSS
SaveExploits2References2
Rows per page
Query Builder