1938 matches found
CVE-2021-31487
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31487
OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31487 due to an out-of-bounds write in DWF file parsing. The flaw arises from insufficient validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file, with the attacker ga...
CVE-2021-31486
OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, enabling a write past the end of an allocated buffer. Exploitation requires user interaction (vis...
CVE-2021-31486
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31485
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31485
OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing heap-based buffer overflow. The root cause is insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution via user interaction (visiting a maliciou...
CVE-2021-31484
OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31484. The issue is an out-of-bounds write in the DWF file parsing code caused by insufficient validation of user-supplied data, enabling remote code execution when a user visits a malicious page or opens a malicious DWF-containing file. E...
CVE-2021-31484
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31483
OpenText Brava! Desktop 16.6.3.84 is affected by a heap-based buffer overflow in the DWF file parsing routine due to insufficient validation of user-supplied data length before copying to a fixed-length buffer. This enables remote code execution with the current process context when a user visits...
CVE-2021-31483
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31482
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31482
OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in the DWF file parsing code, allowing remote code execution after the user opens a malicious DWF/file or visits a crafted page. The root cause is lack of validation of user-supplied data, causing a write past the end of an a...
CVE-2021-31481
OpenText Brava! Desktop 16.6.3.84 is affected by a vulnerability in parsing SLDPRT files that leads to an untrusted pointer dereference and remote code execution. The issue stems from insufficient validation of a user-supplied value before dereferencing it as a pointer. Exploitation requires user...
CVE-2021-31481
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31480
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31480
CVE-2021-31480 affects OpenText Brava! Desktop 16.6.3.84. The issue is a type confusion vulnerability in the parsing of DXF files caused by improper validation of user-supplied data. An attacker must entice a user to visit a malicious page or open a malicious file, after which arbitrary code can ...
CVE-2021-31479
OpenText Brava! Desktop 16.6.3.84 is affected by a PDF parsing vulnerability caused by an uninitialized pointer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and would run with the current process’s privileges. Repo...
CVE-2021-31479
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2021-31478
OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31478. The flaw resides in PDF parsing and causes a heap-based buffer overflow due to improper validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...
CVE-2021-31478
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...