VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 8, 2017· Updated Jun 17, 2026

CVE-2017-11110

CVE-2017-11110

Description

The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Catdoc/Catdoc2 versions
    cpe:2.3:a:fossies:catdoc:0.95:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fossies:catdoc:0.95:*:*:*:*:*:*:*
    • (no CPE)range: <0.95

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.