Lucene search
+L

441 matches found

CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•22 views

Open Design Alliance Drawings SDK 资源管理错误漏洞

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

7.8CVSS6.1AI score0.00884EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/29 12:00 a.m.•11 views

PT-2021-24033

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A use-after-free issue exists when parsing DWF/DWFX files, triggered by crafted data and lack of proper input validation, allowing an attacker to execute code in the...

7.8CVSS0.00884EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/11/29 12:00 a.m.•16 views

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides easy, object-oriented API access to data in .dwg and .dgn, C API, file repair support, support for . code execution...

7.8CVSS5.7AI score0.0084EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•35 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Based Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01897EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•50 views

Open Design Alliance (ODA) Drawings Explorer JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.4AI score0.0084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•25 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01897EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•28 views

Open Design Alliance (ODA) Drawings Explorer TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.6AI score0.0084EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•33 views

Open Design Alliance (ODA) Drawings Explorer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.3AI score0.01383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•31 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01897EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•35 views

Open Design Alliance (ODA) Drawings Explorer DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01681EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•32 views

Open Design Alliance (ODA) Drawings Explorer DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.6AI score0.01452EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•28 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01897EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/11/29 12:00 a.m.•30 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01897EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/22 9:15 a.m.•18 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS6AI score0.01383EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/22 9:15 a.m.•28 views

Design/Logic Flaw

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

6.8CVSS7.7AI score0.01383EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/11/22 8:55 a.m.•52 views

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.9AI score0.01383EPSS
SaveExploits0References2
CVE
CVE
•added 2021/11/22 8:55 a.m.•82 views

CVE-2021-43582

CVE-2021-43582 is an Use-After-Free vulnerability in the Open Design Alliance Drawings SDK (and related ODA tools) related to DWG file parsing prior to 2022.11. The issue arises from not validating an object's existence before performing operations, enabling an attacker to execute code in the cur...

7.8CVSS7.6AI score0.01383EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/22 12:00 a.m.•9 views

CVE-2021-43582: Use After Free

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

7.8CVSS6.1AI score0.01383EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/11/19 12:00 a.m.•83 views

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01430)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for . The vulnerabili...

8.8CVSS3.6AI score0.01241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•20 views

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

7.8CVSS7.6AI score0.01383EPSS
SaveExploits0References7
Rows per page
Query Builder