Lucene search
+L

512 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.23 views

OpenText Brava! Desktop DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS4.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.14 views

OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/12/03 12:00 a.m.17 views

OpenText Brava! Desktop DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS5.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:00 a.m.27 views

Open Design Alliance (ODA) ODAViewer DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6AI score0.01681EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:00 a.m.31 views

Open Design Alliance (ODA) Drawings Explorer DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01681EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/19 7:15 p.m.6 views

CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.6AI score0.02546EPSS
SaveExploits1References9
Prion
Prion
added 2021/11/19 7:15 p.m.34 views

Remote code execution

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

6.8CVSS8.6AI score0.02546EPSS
SaveExploits1References6Affected Software3
CNVD
CNVD
added 2021/11/16 12:00 a.m.90 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89164)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS3.2AI score0.01695EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.23 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS0.01681EPSS
SaveExploits0References4
Prion
Prion
added 2021/11/14 9:15 p.m.21 views

Cross site scripting

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

6.8CVSS7.5AI score0.01681EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/11/14 12:00 a.m.59 views

CVE-2021-43391

CVE-2021-43391 affects Open Design Alliance Drawings SDK prior to 2022.11. The vulnerability is an out-of-bounds read during DXF parsing caused by an invalid dash counter in line types, which could allow code execution in the context of the current process. Siemens/connected advisories confirm af...

7.8CVSS7.5AI score0.01681EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/11/14 12:00 a.m.37 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8AI score0.01681EPSS
SaveExploits0References4
OSV
OSV
added 2021/09/08 4:15 p.m.5 views

DEBIAN-CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.8AI score0.02885EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/09/08 4:15 p.m.40 views

CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.02885EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/08 4:15 p.m.8 views

UBUNTU-CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.1AI score0.02885EPSS
SaveExploits1References3
Talos
Talos
added 2021/09/07 12:00 a.m.42 views

Ribbonsoft dxflib DL_Dxf::handleLWPolylineData heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2021-1346 Ribbonsoft dxflib DLDxf::handleLWPolylineData heap-based buffer overflow vulnerability September 7, 2021 CVE Number CVE-2021-21897 SUMMARY A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0....

8.8CVSS8.8AI score0.02885EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
added 2021/08/18 12:00 a.m.32 views

Siemens JT2Go DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF...

7.8CVSS4.2AI score0.02775EPSS
SaveExploits0References2
NVD
NVD
added 2021/06/17 1:15 p.m.24 views

CVE-2021-32936

An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...

7.8CVSS0.02775EPSS
SaveExploits0References5
Prion
Prion
added 2021/06/17 1:15 p.m.26 views

Design/Logic Flaw

An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...

6.8CVSS7.7AI score0.02775EPSS
SaveExploits0References5Affected Software4
Cvelist
Cvelist
added 2021/06/17 12:00 a.m.49 views

CVE-2021-32936

An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...

8AI score0.02775EPSS
SaveExploits0References5
Rows per page
Query Builder