CVE-2024-52035: Integer Overflow
An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6~deb12u1 - Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6 - Upgrade
Upgrade
debian/catdocto a version that resolves this vulnerability.Fixed in 1:0.95-6~deb12u1Fixed in 1:0.95-6
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52035?
CVE-2024-52035 has a high severity rating due to its potential for heap-based memory corruption.
How do I fix CVE-2024-52035?
To fix CVE-2024-52035, update to the latest version of CatDoc where the vulnerability is addressed.
What products are affected by CVE-2024-52035?
The affected product by CVE-2024-52035 is CatDoc version 0.95.
What type of vulnerability is CVE-2024-52035?
CVE-2024-52035 is an integer overflow vulnerability that can lead to heap-based memory corruption.
How can attackers exploit CVE-2024-52035?
Attackers can exploit CVE-2024-52035 by providing specially crafted malformed files to trigger the vulnerability.