CVE-2003-0193 — Catdoc vulnerability

4 documents4 sources

Severity

2.1LOWNVD

EPSS

0.1%

top 65.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Catdoc Debian Catdoc

Timeline

PublishedAug 18

Latest updateApr 29

Description

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/catdoc< catdoc 0.91.5-2 (bookworm)

▶Debiancatdoc/catdoc< 0.91.5-2+3

▶NVDcatdoc/catdoc0.91

🔴Vulnerability Details

GHSA

GHSA-27q9-g54w-g6cm: msxlsview↗2022-04-29

▶

OSV

CVE-2003-0193: msxlsview↗2004-08-18

▶

📋Vendor Advisories

Debian

CVE-2003-0193: catdoc - msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwr...↗2003

▶