Integer Underflow Vulnerability in Catdoc Product by Catdoc Team

CVE-2024-54028

What is CVE-2024-54028?

An integer underflow vulnerability has been identified in the OLE Document DIFAT Parser functionality of Catdoc version 0.95. By crafting a specially malformed file, an attacker can exploit this vulnerability to cause heap-based memory corruption, potentially allowing unauthorized access or control over affected systems. It's crucial for users to review and mitigate the risks associated with this vulnerability, especially those using affected versions.

References