CVE-2021-31501

🗓️ 15 Jun 2021 19:11:46Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 44 Views

CVE-2021-31501 allows remote attackers to disclose sensitive information on OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit by visiting a malicious page or opening a malicious file. Flaw in DWG file parsing allows for read past the end of an allocated data structure, potentially leading to arbitrary code execution. ZDI-CAN-13310

Reporter	Title	Published	Views	Family All 11
CNNVD	OpenText Brava! 缓冲区错误漏洞	2 Jun 202100:00	–	cnnvd
CNVD	OpenText Brava! Buffer Overflow Vulnerability	4 Jun 202100:00	–	cnvd
CNVD	OpenText Brava! Desktop Out-of-Bounds Read Vulnerability	3 Jun 202100:00	–	cnvd
Cvelist	CVE-2021-31501	15 Jun 202119:11	–	cvelist
EUVD	EUVD-2021-18401	7 Oct 202500:30	–	euvd
NVD	CVE-2021-31501	15 Jun 202119:15	–	nvd
OSV	CVE-2021-31501	15 Jun 202119:15	–	osv
Prion	Design/Logic Flaw	15 Jun 202119:15	–	prion
Positive Technologies	PT-2021-19384 · Opentext · Opentext Brava! Desktop	2 Jun 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-31501	22 May 202518:32	–	redhatcve

NVD

Vulners

Node

opentext brava!_desktopMatch16.6.3.84

[
  {
    "product": "Brava! Desktop",
    "vendor": "OpenText",
    "versions": [
      {
        "status": "affected",
        "version": "16.6.3.84"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-641/
cvedetails	www.cvedetails.com/vulnerability-list/vendor_id-2032/product_id-96672/Opentext-Brava-Desktop.html
opentext	www.opentext.com/products/brava

21 Nov 2024 06:05Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.13.3

CVSS 24.3

CVSS 33.3

EPSS0.00309

CWE-125