CatDOC, a program that enables users to read Microsoft Word files on unix machines, was found to contain numerous possible exploits though out its code.
CatDOC contains in its code numerous exploits which have been reported to be used by malicious user to gain access to sites. These exploits use large strings inside a word document to cause CatDOC to try and parse these strings, making it overflow, causing the execution of arbitrary code within the privilages set upon the catdoc program. This was reported to happen in a company which used CatDOC in their automated indexing program.
