Lucene search
MitreCVELIST:CVE-2021-25175HistoryJan 18, 2021 - 7:13 a.m.
CVE-2021-25175
2021-01-1807:13:53
mitre
www.cve.org
9
type conversion
.dxf
.dwg
malformed files
denial of service
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
References
cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
www.opendesign.com/security-advisories
www.zerodayinitiative.com/advisories/ZDI-21-218/
www.zerodayinitiative.com/advisories/ZDI-21-223/
www.zerodayinitiative.com/advisories/ZDI-21-224/
www.zerodayinitiative.com/advisories/ZDI-21-244/
www.zerodayinitiative.com/advisories/ZDI-21-245/
www.zerodayinitiative.com/advisories/ZDI-21-246/
Related
zdi
zdi
cve
cve
CVE-2021-25175
2021-01-18 08:15:13
prion
prion
Type confusion
2021-01-18 08:15:00
nvd
nvd
CVE-2021-25175
2021-01-18 08:15:13
ics
ics
Open Design Alliance Drawings SDK (Update A)
2021-05-06 12:00:00
Siemens COMOS
2022-03-10 12:00:00
Siemens JT2Go and Teamcenter Visualization (Update A)
2021-05-27 12:00:00
nessus
nessus
Siemens JT2Go < 13.1.0.1 Multiple Vulnerabilities (SSA-663999)
2021-05-07 00:00:00