222 matches found
CVE-2021-34916
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
The vulnerability of the `dwgCompressor :: copyCompBytes21` function in the `libdfxfw` library of the LibreCAD automated design system allows a attacker to execute arbitrary code.
The vulnerability of the dwgCompressor :: copyCompBytes21 function in the libdfxfw library of the LibreCAD automated design system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using...
The vulnerability of the dxfRW function in the processLType() method of the libdfxfw library in the LibreCad automated design system allows a perpetrator to execute arbitrary code.
The vulnerability of the dxfRW function in the processLType method of the libdfxfw library in the LibreCad automated design system is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created .dxf format...
DEBIAN-CVE-2021-21898
A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21899
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
UBUNTU-CVE-2021-21899
A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-43336
An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file an invalid number of properties can trigger a write operation pas...
The vulnerability of Autodesk Navisworks software lies in the ability to write code beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code in the context of the current user.
The vulnerability of Autodesk Navisworks software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created DWG file...
CVE-2021-38107
CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...
The vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the disclosure of information in error-prone areas of data, allows attackers to write arbitrary files.
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the disclosure of information in the erroneous data area when processing DWG files. Exploiting this vulnerability can allow attackers to write arbitrary files...
CVE-2021-40156
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...
CVE-2021-40155
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...
CVE-2021-40156
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code...
Autodesk Navisworks 缓冲区错误漏洞
Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to read beyond its allocated boundaries when parsing the DWG file, allowing a...
Autodesk Navisworks 缓冲区错误漏洞
Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to write outside of the allocated boundaries when parsing the DWG file, and a...
Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the writing of data beyond the buffer during syntax analysis of DWG files. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code using a specially created malicious DWG file...
CVE-2021-31508
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-27041
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code...