Lucene search

K

Libdoc Security Vulnerabilities

cve
cve

CVE-2018-20451

The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.

6.5CVSS

6.3AI Score

0.001EPSS

2018-12-25 05:29 PM
26
cve
cve

CVE-2018-20453

The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.

6.5CVSS

6.3AI Score

0.001EPSS

2018-12-25 05:29 PM
34
cve
cve

CVE-2019-7156

In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.

6.5CVSS

6.4AI Score

0.001EPSS

2019-01-29 08:29 AM
28
cve
cve

CVE-2019-7233

In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.

8.8CVSS

8.6AI Score

0.002EPSS

2019-01-30 09:29 PM
26