Siemens JT2Go DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

Siemens JT2Go DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

Siemens JT2Go < 13.2.0.1 Multiple Vulnerabilities (SSA-365397)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.1. It is, therefore, affected by multiple vulnerabilities, including the following: - An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK resulting from the lack of prope...

PT-2021-5221 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::copyCompBytes21 functionality due to a heap buffer overflow. This can be triggered by a specially-crafted .dwg file, allowing an...

PT-2021-5117 · Librecad +2 · Libdxfrw +2

Name of the Vulnerable Software and Affected Versions: LibreCad libdxfrw version 2.2.0-rc2-19-ge02f3580 Description: A code execution issue exists in the dwgCompressor::decompress18 functionality. This can be triggered by a specially-crafted .dwg file, leading to an out-of-bounds write. An attack...

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code

The vulnerability of software for modeling, designing, and drawing in AutoCAD relates to the writing of data beyond the buffer during syntax analysis of DWG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created DWG file...

GNU LibreDWG Resource Management Error Vulnerability

GNU LibreDWG is a C library for processing DWG files from the GNU community. GNU LibreDWG is vulnerable due to a double-free in bitchainfree from dwg encodeMTEXT and dwgencodeaddobject calls. No detailed vulnerability details are currently available...

GNU LibreDWG 资源管理错误漏洞

GNU LibreDWG is a C library for processing DWG files from the GNU community. GNU LibreDWG is vulnerable due to a double-free in bitchainfree from dwg encodeMTEXT and dwgencodeaddobject calls. No detailed vulnerability details are currently available...

CVE-2021-27043

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application...

CVE-2021-27041

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

CVE-2021-27040

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

Design/Logic Flaw

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application...

Code injection

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27043

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application...

Code injection

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code...

Code injection

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27043

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application...

CVE-2021-27043

CVE-2021-27043 affects Autodesk DWG/AutoCAD components due to an Arbitrary Address Write vulnerability. The issue allows writing to unexpected paths caused by memory corruption, with exploitation described as requiring the victim to enable full page heap in the application. Public references from...