Description
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.opendesign.com/security-advisories ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-243/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-240/ ↗
- https://www.zerodayinitiative.com/advisories/ZDI-21-220/ ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf ↗