Lucene search
+L

344 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.20 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.24 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

3.3CVSS3.2AI score0.00855EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.22 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.19 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.21 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.22 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.14 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/29 12:0 a.m.27 views

Open Design Alliance (ODA) Drawings Explorer DWF File Parsing Out-Of-Based Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS5.5AI score0.01837EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/17 12:0 a.m.24 views

(0Day) Autodesk Design Review DWF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS6.8AI score0.01708EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.51 views

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89162)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK contains a security vulnerability that results from an exception vulnerability in the sample The ODA Viewer continues to process...

9.8CVSS3.2AI score0.03517EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/11/16 12:0 a.m.20 views

Open Design Alliance Drawings SDK Buffer Overflow Vulnerability (CNVD-2021-89163)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

7.8CVSS3.8AI score0.01837EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.32 views

CVE-2021-43280

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

7.8CVSS0.01837EPSS
SaveExploits0References8
OSV
OSV
added 2021/11/14 9:15 p.m.8 views

CVE-2021-43280

A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage thi...

7.8CVSS6.3AI score0.01837EPSS
SaveExploits0References8
OSV
OSV
added 2021/11/14 9:15 p.m.6 views

CVE-2021-43276

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the...

7.8CVSS5.6AI score0.00814EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.37 views

CVE-2021-43276

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the...

7.8CVSS0.00814EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/14 9:15 p.m.23 views

CVE-2021-43274

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

7.8CVSS0.00855EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/14 9:15 p.m.5 views

CVE-2021-43272

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the...

9.8CVSS6AI score0.03517EPSS
SaveExploits0References4
Prion
Prion
added 2021/11/14 9:15 p.m.18 views

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the...

7.5CVSS9.5AI score0.03517EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/14 9:15 p.m.2 views

CVE-2021-43274

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

7.8CVSS6.3AI score0.00855EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/14 9:15 p.m.17 views

Design/Logic Flaw

A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing of DWF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage...

6.8CVSS7.8AI score0.00855EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder