What’s Vulnerable › Vulnerabilities

CVE-2017-11110

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-08 · updated 2026-06-17
• Weakness: CWE-787

Description

The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.

Affected products

• Fossies Catdoc: 0.95

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1468471
• https://bugzilla.redhat.com/show_bug.cgi?id=1468471

Get alerted when CVE-2017-11110 or the next vulnerability affects your stack