Lucene search
+L

1211 matches found

CNVD
CNVD
•added 2021/11/16 12:00 a.m.•68 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89165)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

7.8CVSS4.3AI score0.01681EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/14 9:15 p.m.•22 views

CVE-2021-43336

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

7.8CVSS0.01695EPSS
SaveExploits0References4
NVD
NVD
•added 2021/11/14 9:15 p.m.•30 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS0.01681EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/11/14 9:15 p.m.•23 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS7.2AI score0.01681EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/11/14 9:15 p.m.•13 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS6.8AI score0.01681EPSS
SaveExploits0References5
Prion
Prion
•added 2021/11/14 9:15 p.m.•28 views

Cross site scripting

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

6.8CVSS7.6AI score0.01695EPSS
SaveExploits0References4Affected Software3
Prion
Prion
•added 2021/11/14 9:15 p.m.•30 views

Cross site scripting

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

6.8CVSS7.5AI score0.01681EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/11/14 12:00 a.m.•47 views

CVE-2021-43391

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8AI score0.01681EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•6 views

PT-2021-23815 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file, such as an invalid number of properties, can trigger a write operation past...

7.8CVSS7.5AI score0.01695EPSS
SaveExploits0References14
CVE
CVE
•added 2021/11/14 12:00 a.m.•110 views

CVE-2021-43336

CVE-2021-43336 affects the Open Design Alliance Drawings SDK prior to 2022.11. It is an out-of-bounds write issue during parsing of DXF/DWG files (invalid number of properties) that can cause a write past the end of an allocated buffer, enabling code execution in the context of the vulnerable pro...

7.8CVSS7.5AI score0.01695EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/11/14 12:00 a.m.•50 views

CVE-2021-43336

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

7.9AI score0.01695EPSS
SaveExploits0References4
CVE
CVE
•added 2021/11/14 12:00 a.m.•71 views

CVE-2021-43391

CVE-2021-43391 affects Open Design Alliance Drawings SDK prior to 2022.11. The vulnerability is an out-of-bounds read during DXF parsing caused by an invalid dash counter in line types, which could allow code execution in the context of the current process. Siemens/connected advisories confirm af...

7.8CVSS7.5AI score0.01681EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•16 views

PT-2021-23826 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DXF files, where crafted data can trigger a read past the end of an allocated buffer, allowing an attacker to execute code in the...

7.8CVSS7.4AI score0.01681EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/14 12:00 a.m.•5 views

CVE-2021-43391: Out-of-bounds Read

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

7.8CVSS6.2AI score0.01681EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/14 12:00 a.m.•4 views

CVE-2021-43336: Out-of-bounds Write

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

7.8CVSS6.2AI score0.01695EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/09/09 12:00 a.m.•144 views

Ribbonsoft dxflib code execution vulnerability

Ribbonsoft dxflib is an open source C library from the Swiss company Ribbonsoft, mainly used for parsing DXF TM files.Ribbonsoft dxflib suffers from a code execution vulnerability, which can be exploited by attackers to provide malicious files to trigger the vulnerability...

8.8CVSS5.1AI score0.02885EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2021/09/08 4:15 p.m.•10 views

DEBIAN-CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.8AI score0.02885EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/09/08 4:15 p.m.•12 views

CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.02885EPSS
SaveExploits1References11
osv_ubuntu
osv_ubuntu
•added 2021/09/08 4:15 p.m.•16 views

UBUNTU-CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS8.1AI score0.02885EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/09/08 4:15 p.m.•47 views

CVE-2021-21897

A code execution vulnerability exists in the DLDxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

8.8CVSS7.8AI score0.02885EPSS
SaveExploits1References2
Rows per page
Query Builder