CVE-2021-31497

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds read vulnerability exists in the parsing of DWG files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)

This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...

CVE-2019-7364

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user...

Remote code execution

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user...

CVE-2019-7364

CVE-2019-7364 describes a DLL preloading vulnerability in Autodesk products (2017–2020 Autodesk Advanced Steel, Civil 3D, AutoCAD and related tools; plus AutoCAD P&ID 2017). The issue allows an attacker to cause code execution by persuading a user to open a malicious DWG file that leverages the D...

Description of the security update for Office Online Server: May 14, 2019

None None...

CVE-2019-7361

An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...

CVE-2019-7359

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7359

The CVE describes an exploitable heap overflow in the AcCellMargin handling code during DXF parsing in Autodesk AutoCAD 2018 and related 2018-era products (Advance Steel, Architecture, Electrical, Map 3D, Mechanical, MEP, P&ID, Plant 3D, LT, Civil 3D). The vulnerability arises when parsing a DXF ...

CVE-2019-7361

The vulnerability CVE-2019-7361 affects Autodesk 2018 product family, including Advance Steel 2018, AutoCAD 2018, AutoCAD Architecture 2018, AutoCAD Electrical 2018, AutoCAD Map 3D 2018, AutoCAD Mechanical 2018, AutoCAD MEP 2018, AutoCAD P&ID 2018, AutoCAD Plant 3D 2018, AutoCAD LT 2018, and Civi...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

CVE-2019-7361: Deserialization of Untrusted Data

An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...

CVE-2019-7359: Out-of-bounds Write

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7358: Out-of-bounds Write

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

AutoDesk AutoCAD 2019 cell margin code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019 P.46.0.0. A specially crafted DXF file with too many cell margins populating an AcCellMargin object can cause a heap overflow, resulting in code execution. An attacker can provide a...

AutoDesk AutoCAD 2019 LinetypeTableRecord Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019. A specially crafted DXF file can cause a use-after-free vulnerability, resulting in code execution. Tested Versions AutoDesk AutoCAD 2019 P.46.0.0 Product URLs...

AutoDesk AutoCAD 2019 DXF-parsing code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019 P.46.0.0. A specially crafted DXF file can cause a heap overflow, resulting in code execution. An attacker must convince a victim to open a malicious document in order to trigger th...

CVE-2017-15759

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3."...

CVE-2017-15746

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."...