362 matches found
Open Design Alliance Drawings SDK 缓冲区错误漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...
PT-2021-23815 · Open Design Alliance · Open Design Alliance Drawings Sdk
Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file, such as an invalid number of properties, can trigger a write operation past...
PT-2021-23826 · Open Design Alliance · Open Design Alliance Drawings Sdk
Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DXF files, where crafted data can trigger a read past the end of an allocated buffer, allowing an attacker to execute code in the...
CVE-2021-43391
CVE-2021-43391 affects Open Design Alliance Drawings SDK prior to 2022.11. The vulnerability is an out-of-bounds read during DXF parsing caused by an invalid dash counter in line types, which could allow code execution in the context of the current process. Siemens/connected advisories confirm af...
Open Design Alliance Drawings SDK 安全漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK contains a security vulnerability that results from an exception vulnerability in the sample The ODA Viewer continues to process...
Open Design Alliance Drawings SDK 缓冲区错误漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...
Open Design Alliance Drawings SDK 资源管理错误漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...
Open Design Alliance Drawings SDK 缓冲区错误漏洞
Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read...
Open Design Alliance Drawings SDK 资源管理错误漏洞
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, a C++ API, support for repairing files, and support for . A security...
Siemens JT2Go < 13.2.0.2 Multiple Vulnerabilities (SSA-938030)
The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.2. It is, therefore, affected by multiple vulnerabilities, including the following: - An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Open Design Alliance...
Siemens JT2Go < 13.2.0.1 Multiple Vulnerabilities (SSA-365397)
The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.1. It is, therefore, affected by multiple vulnerabilities, including the following: - An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK resulting from the lack of prope...
CVE-2021-32944
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...
CVE-2021-32952
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service...
CVE-2021-32948
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...
CVE-2021-32944
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...
CVE-2021-32950
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service...
CVE-2021-32950
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service...
CVE-2021-32940
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK All versions prior to 2022.5 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-servi...
CVE-2021-32936
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...
CVE-2021-32936
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...