Lucene search
+L

17 matches found

osv_ubuntu
osv_ubuntu
•added 2026/10/16 12:00 a.m.•12 views

UBUNTU-CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/10/16 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-111126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/15 7:17 p.m.•9 views

CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS0.00197EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/10/15 7:17 p.m.•19 views

DEBIAN-CVE-2026-111126

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/15 6:57 p.m.•5 views

CVE-2026-111126 catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/10/15 6:57 p.m.•9 views

EUVD-2026-102357

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/15 6:57 p.m.•18 views

CVE-2026-111126

The catdoc software (versions through 0.95 ) is vulnerable to an out-of-bounds read in the MULRK record handler of the process_item() function located in src/xlsparse.c. An attacker can supply a specially crafted .xls workbook or BIFF stream with a large endcol value to the xls2csv utility. This ...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/15 6:57 p.m.•35 views

CVE-2026-111126 catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS0.00197EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/15 12:00 a.m.•7 views

CVE-2026-111126: Out-of-bounds Read

catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of processitem in src/xlsparse.c that allows attackers to read past the static rec buffer via a crafted end column. Attackers can supply a crafted .xls workbook or BIFF stream with a large endcol to xls2c...

6.9CVSS6.4AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•10 views

PT-2026-115132

Name of the Vulnerable Software and Affected Versions catdoc versions 0.95 and earlier Description An out-of-bounds read exists in the process item function within the MULRK record handler in src/xlsparse.c. This occurs when the software processes a crafted .xls workbook or BIFF stream containing...

6.9CVSS6.2AI score0.00197EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2017-12109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS fi...

8.8CVSS8.4AI score0.02677EPSS
SaveExploits2References2
NVD
NVD
•added 2018/04/24 7:29 p.m.•34 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.1AI score0.02677EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2018/04/24 7:29 p.m.•30 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.3AI score0.02677EPSS
SaveExploits2References1
osv_ubuntu
osv_ubuntu
•added 2018/04/24 7:29 p.m.•34 views

UBUNTU-CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS6.2AI score0.02677EPSS
SaveExploits2References3
UbuntuCve
UbuntuCve
•added 2018/04/24 7:29 p.m.•26 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS7.3AI score0.02677EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2018/04/24 7:00 p.m.•44 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.1AI score0.02677EPSS
SaveExploits2References1
Debian CVE
Debian CVE
•added 2018/04/24 7:00 p.m.•65 views

CVE-2017-12109

An exploitable integer overflow vulnerability exists in the xlspreparseWorkSheet function of libxls 1.4 when handling a MULRK record. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerabilit...

8.8CVSS9.1AI score0.02677EPSS
SaveExploits2
Rows per page
Query Builder