Input validation

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

CVE-2021-45844 affects FreeCAD 0.19 via improper sanitization when invoking the ODA File Converter, enabling OS command injection through a crafted filename. Mitigations include upgrading FreeCAD to fixed releases cited by Debian/Mageia advisories (e.g., FreeCAD 0.19.1+dfsg1-2+deb11u1 for Debian ...

FreeCad 操作系统命令注入漏洞

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the finite element method of building information modeling software. A command injection vulnerability exists in FreeCAD version 0.19, which stems from improper cleanup when calling...

PT-2022-12432 · Freecad +1 · Freecad +1

Name of the Vulnerable Software and Affected Versions: FreeCAD version 0.19 Description: The issue is related to improper sanitization in the invocation of ODA File Converter from FreeCAD, allowing an attacker to inject OS commands via a crafted filename. Recommendations: For FreeCAD version 0.19...

Open Design Alliance (ODA) Drawings Explorer JPG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

CVE-2021-44423

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

Out-of-bounds

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

CVE-2021-44423

CVE-2021-44423 affects Open Design Alliance (ODA) Drawings Explorer/SDK. The vulnerability is an out-of-bounds read triggered while parsing BMP files after loading them, caused by unchecked input data in BMP handling. An attacker could potentially execute code in the current process context. Publ...

CVE-2021-44423

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

Open Design Alliance (ODA) Drawings Explorer TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

CVE-2021-44048

An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ODA Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can...

CVE-2021-44048

An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ODA Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can...

CVE-2021-44048

Open Design Alliance (ODA) Drawings Explorer contains an out-of-bounds write vulnerability in its TIF file parsing after loading TIF data. The issue occurs in affected versions prior to 2022.11 and can trigger a write past the end of an allocated buffer, enabling code execution in the context of ...

Open Design Alliance (ODA) Drawings Explorer Out-of-Bounds Writing Vulnerability

Open Design Alliance ODA Drawings Explorer is a browser. An out-of-bounds write vulnerability exists in Open Design Alliance ODA Drawings Explorer, which can be exploited by attackers to execute code in the context of the current process...

Open Design Alliance (ODA) Drawings Explorer JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Open Design Alliance (ODA) Drawings Explorer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...