CRITICAL🇬🇧 English

CVE-2021-43272

CVSS 9.8v3.1pub. 2021-11-14upd. 2024-11-21

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Opendesign Oda Viewer

    APP
    Opendesign
    < 2022.11
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-43276HIGH7.8ten sam produkt

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a...

CVE-2023-5180HIGH7.8ten sam vendor

An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of se...

CVE-2023-5179HIGH7.8ten sam vendor

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start o...

CVE-2023-22669HIGH7.8ten sam vendor

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length ...

CVE-2023-22670HIGH7.8ten sam vendor

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK bef...