CVE-2021-31485

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing heap-based buffer overflow. The root cause is insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution via user interaction (visiting a maliciou...

CVE-2021-31484

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31484

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31484. The issue is an out-of-bounds write in the DWF file parsing code caused by insufficient validation of user-supplied data, enabling remote code execution when a user visits a malicious page or opens a malicious DWF-containing file. E...

CVE-2021-31483

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31483

OpenText Brava! Desktop 16.6.3.84 is affected by a heap-based buffer overflow in the DWF file parsing routine due to insufficient validation of user-supplied data length before copying to a fixed-length buffer. This enables remote code execution with the current process context when a user visits...

CVE-2021-31482

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in the DWF file parsing code, allowing remote code execution after the user opens a malicious DWF/file or visits a crafted page. The root cause is lack of validation of user-supplied data, causing a write past the end of an a...

CVE-2021-31482

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31481

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31481

OpenText Brava! Desktop 16.6.3.84 is affected by a vulnerability in parsing SLDPRT files that leads to an untrusted pointer dereference and remote code execution. The issue stems from insufficient validation of a user-supplied value before dereferencing it as a pointer. Exploitation requires user...

CVE-2021-31480

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31480

CVE-2021-31480 affects OpenText Brava! Desktop 16.6.3.84. The issue is a type confusion vulnerability in the parsing of DXF files caused by improper validation of user-supplied data. An attacker must entice a user to visit a malicious page or open a malicious file, after which arbitrary code can ...

CVE-2021-31479

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31479

OpenText Brava! Desktop 16.6.3.84 is affected by a PDF parsing vulnerability caused by an uninitialized pointer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and would run with the current process’s privileges. Repo...

CVE-2021-31478

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31478

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31478. The flaw resides in PDF parsing and causes a heap-based buffer overflow due to improper validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-31488: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31478: Heap-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31489: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

OpenText Brava! Desktop TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Opentext OpenText Brava! 缓冲区错误漏洞

Opentext OpenText Brava! is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating, and editing many types of documents. A security vulnerability exists in OpenText's Brava! Desktop that stems from a lack of proper validation of...