A stack-based buffer overflow vulnerability exists in the DWF file...
Vulnerability Description
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-43280
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.opendesign.com/security-advisories
- https://www.zerodayinitiative.com/advisories/ZDI-21-1356/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1343/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1355/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1345/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1341/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1340/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1342/
More from opendesign
View All →Affected Vendor
opendesign
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.