<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 12:05:49 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-48877</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-48877</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; xls2csv&lt;/p&gt;
&lt;p&gt;A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; xls2csv&lt;/p&gt;
&lt;p&gt;A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-48877</guid>
    </item>
    <item>
      <title>USN-8838-1 — catdoc vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-8838-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: catdoc, Ubuntu:Pro:18.04:LTS: catdoc, Ubuntu:Pro:20.04:LTS: catdoc, Ubuntu:Pro:22.04:LTS: catdoc, Ubuntu:Pro:24.04:LTS: catdoc&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc had an integer overflow when processing
shared string tables in malformed spreadsheet files. An attacker could
possibly use this issue to cause catdoc to crash or execute arbitrary code.
(CVE-2024-48877)&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc had an integer overflow when processing file
allocation tables in malformed document files. An attacker could possibly
use this issue to cause catdoc to crash or execute arbitrary code.
(CVE-2024-52035)&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc incorrectly validated sector sizes when
processing malformed document files, leading to an integer underflow. An
attacker could possibly use this issue to cause catdoc to crash or execute
arbitrary code. (CVE-2024-54028)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: catdoc, Ubuntu:Pro:18.04:LTS: catdoc, Ubuntu:Pro:20.04:LTS: catdoc, Ubuntu:Pro:22.04:LTS: catdoc, Ubuntu:Pro:24.04:LTS: catdoc&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc had an integer overflow when processing
shared string tables in malformed spreadsheet files. An attacker could
possibly use this issue to cause catdoc to crash or execute arbitrary code.
(CVE-2024-48877)&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc had an integer overflow when processing file
allocation tables in malformed document files. An attacker could possibly
use this issue to cause catdoc to crash or execute arbitrary code.
(CVE-2024-52035)&lt;/p&gt;
&lt;p&gt;It was discovered that catdoc incorrectly validated sector sizes when
processing malformed document files, leading to an integer underflow. An
attacker could possibly use this issue to cause catdoc to crash or execute
arbitrary code. (CVE-2024-54028)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-8838-1</guid>
    </item>
  </channel>
</rss>
