libdoc project records

4 published records for vendor libdoc project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-7233No exploit	In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.libdoc project · libdoc · CWE-476 Pre-auth Memory safety	High8.8	—	1.5%	Jan 30, 2019
26Monitor	CVE-2019-7156No exploit	In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.libdoc project · libdoc · CWE-369 Pre-auth Denial of service	Medium6.5	—	1.3%	Jan 29, 2019
26Monitor	CVE-2018-20453No exploit	The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial oflibdoc project · libdoc · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	0.9%	Dec 25, 2018
26Monitor	CVE-2018-20451No exploit	The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a deniallibdoc project · libdoc · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	0.9%	Dec 25, 2018

CVE-2019-7233
35Monitor
In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
libdoc project · libdocJan 30, 2019
CVE-2019-7156
26Monitor
In libdoc through 2019-01-28, calcFileBlockOffset in ole.c allows division by zero.
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Denial of service
libdoc project · libdocJan 29, 2019
CVE-2018-20453
26Monitor
The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of
MediumCVSS 6.5No exploitEPSS 1%
libdoc project · libdocDec 25, 2018
CVE-2018-20451
26Monitor
The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial
MediumCVSS 6.5No exploitEPSS 1%
libdoc project · libdocDec 25, 2018