CVE-2023-5180: Out-of-bounds Write

An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process...

Open Design Alliance Drawings SDK Security Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to .dwg and .dgn data through a convenient, object-oriented API, a C++ API, support for repairing files, and support for .NET, JAVA, and Python...

The vulnerability in the set of tools for developing software for engineering applications, Drawings SDK, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-5179

Open Design Alliance Drawings SDK (pre-2024.10) is affected by CVE-2023-5179. A crafted DGN file can corrupt the MiniFat sector start value, causing an out-of-bounds read. Consequences described include crash/denial-of-service and potential code execution. The description does not specify a confi...

CVE-2023-5179

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack Crash, Exit, or Restart o...

Open Design Alliance Drawings SDK Buffer Error Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The development kit accesses data in .dwg and .dgn through a convenient, object-oriented API, providing features such as a C++ API, support for repairing files, and .NET...

PT-2023-31893

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2024.10 Description An issue in the Open Design Alliance Drawings SDK allows attackers to cause a crash or potentially enable code execution through a denial-of-service attack. This occurs wh...

CVE-2023-5179: Out-of-bounds Read

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack Crash, Exit, or Restart o...

The vulnerability of the recovery mode implementation in the software development tool for engineering applications, Drawings SDK, relates to writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the recovery mode implementation in the software development tool for engineering applications, Drawings SDK, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Siemens Teamcenter Visualization and JT2Go Memory Corruption Vulnerability

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM and TIF data.Teamcenter Visualization software is able to enhance its Product Lifecycle Management PLM environments with a comprehensive range of visualization solutions. PLM environme...

CVE-2023-22669

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-22669

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-22669

Open Design Alliance Drawings SDK (ODA) is affected by CVE-2023-22669 in versions prior to 2023.6, with a heap-based buffer overflow in DWG parsing that could allow code execution in the context of the current process. The issue is documented with CVSS v3.1 base score 7.8 (HIGH). Mitigation: upgr...

CVE-2023-22670

CVE-2023-22670 is a heap-based buffer overflow in Open Design Alliance Drawings SDK prior to 2023.6, caused by insufficient validation of the length of user-supplied XRecord data before copying to a fixed-length heap buffer in the DXF file parsing path. The vulnerability allows code execution in ...

CVE-2023-22670: Out-of-bounds Write

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

CVE-2023-22669: Out-of-bounds Write

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2023-26495

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code...

CVE-2023-26495

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code...

Design/Logic Flaw

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code...

PT-2023-20685 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2024.1 Description: An issue was discovered in the Open Design Alliance Drawings SDK where a crafted DWG file can force the SDK to reuse an object that has been freed. This can be leveraged ...