CVE-2021-25178: Out-of-bounds Write

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack Crash,...

CVE-2021-25174: Out-of-bounds Write

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service Crash, Exit, or Restart...

CVE-2021-25177: Access of Resource Using Incompatible Type

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

October 14, 2014 update for SharePoint Server 2013 (KB2889930)

October 14, 2014 update for SharePoint Server 2013 KB2889930 This article describes update KB2889930 for Microsoft SharePoint Server 2013 that was released on October 14, 2014. Improvements and Fixes Fixes the following issue: Assume that you insert a shape that contains a hyperlink into a drawin...

Friday Squid Blogging: Amazingly Realistic Squid Drawings

The squid drawings of Yuuki Tokuda are simply incredible. I tried to figure out how to buy one of them, but everything is in Japanese. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

CVE-2018-18223

Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash...

CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...

CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...

CVE-2018-18223

Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash...

Design/Logic Flaw

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...

CVE-2018-18223

The CVE-2018-18223 entry affects Open Design Alliance Drawings SDK 2019Update1, with a vulnerability during reading of malformed files that can disclose sensitive information from process memory or cause a crash. The connected sources provide concrete details (affected component and impact) but d...

CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...

CVE-2018-18224

CVE-2018-18224 affects Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms, enabling reading past/before buffer boundaries and potential information leakage or crashes. Connected IBM docs tie this to Rational DOORS Next Generation versions and provide a remediation: upgrade Rat...

CVE-2018-18224: Out-of-bounds Read

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information...

CVE-2018-18223: Undefined Security Weakness

Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash...

Oracle Open Design Alliance Drawings SDK Buffer Overflow Vulnerability

The Open Design Alliance Drawings SDK is a software development kit SDK for .dwg and .dgn interoperability. A buffer overflow vulnerability exists in Oracle Open Design Alliance Drawings SDK. An attacker could exploit this vulnerability to obtain sensitive information in process memory or cause a...

Oracle Open Design Alliance Drawings SDK Buffer Overflow Vulnerability (CNVD-2019-37385)

The Open Design Alliance Drawings SDK is a software development kit SDK for .dwg and .dgn interoperability. A buffer overflow vulnerability exists in Oracle Open Design Alliance Drawings SDK. An attacker could exploit this vulnerability to obtain sensitive information in process memory or cause a...

PT-2018-2258

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK version 2019Update1 Oracle Outside In Technology SDK affected versions not specified Description A vulnerability exists in the file reading procedure, allowing attackers to perform read operations past the end...

PT-2018-2257

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology affected versions not specified Open Design Alliance Drawings SDK version 2019Update1 Description The issue is related to insufficient access control in the Outside In Filters ODA Module component of Oracle Outside...

Nigerian BEC Scams Hit 500 Companies in 50 Countries

Nigerian cybercriminals targeting industrial firms have stolen a slew of sensitive technical drawings, network diagrams, cost estimates, and project plans already this year. The data, exfiltrated by a cocktail of different spyware programs, wasn’t stolen from just executives, but also operators,...