CVE-2022-28311

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

SUSE CVE-2022-0496

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular not necessarily malformed! properties may cause an out-of-bounds memory access when imported using import...

PT-2022-25713 · Sap +1 · Sap 3D Visual Enterprise Viewer +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a manipulated AutoCAD .dxf file from untrusted sources is opened in the viewer, it can trigger Remote Code Execution. This occurs...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

CVE-2022-0496

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular not necessarily malformed! properties may cause an out-of-bounds memory access when imported using import...

DEBIAN-CVE-2022-0496

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular not necessarily malformed! properties may cause an out-of-bounds memory access when imported using import...

Openscad 缓冲区错误漏洞

Openscad is an Openscad open source for creating solid 3D CAD objects. Openscad has a security vulnerability that stems from the fact that when imported using import, a drawing with certain not necessarily incorrectly formatted! attributes, a DXF-formatted drawing may result in an out-of-bounds...

CVE-2022-33024

There is an Assertion int decodepreR13entitiesBITCODERL, BITCODERL, unsigned int, BITCODERL, BITCODERL, BitChain , DwgData ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608...

PT-2022-18945 · Bentley · Bentley View

Name of the Vulnerable Software and Affected Versions: Bentley View version 10.16.02.022 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fl...

Bentley View 缓冲区错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A buffer error vulnerability exists in Bentley View version 10.16.02.022. An attacker could exploit the vulnerability to force an out-of-bounds read to be triggered via a DXF file containing malicious data...

CVE-2021-46627

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46613

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-45343

In LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an attacker to crash the application using a crafted DXF document...

The vulnerability of the dxfRW function in the processLType() method of the libdfxfw library in the LibreCad automated design system allows a perpetrator to execute arbitrary code.

The vulnerability of the dxfRW function in the processLType method of the libdfxfw library in the LibreCad automated design system is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created .dxf format...

DEBIAN-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2021-21900

A code execution vulnerability exists in the dxfRW::processLType functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-43336

An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bound...

Ribbonsoft dxflib 数字错误漏洞

Ribbonsoft dxflib is an open source C library from the Swiss company Ribbonsoft, mainly used for parsing DXF TM files.Ribbonsoft dxflib suffers from a code execution vulnerability, which can be exploited by attackers to provide malicious files to trigger the vulnerability...

CVE-2021-31508

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...