Remote Code Execution Vulnerability in OpenText Brava! Desktop

CVE-2021-31489

Summary

A remote code execution vulnerability exists in OpenText Brava! Desktop versions, allowing attackers to execute arbitrary code. The flaw arises during the parsing of DWF files, due to inadequate validation of user-supplied data. This can lead to a situation where an attacker can perform a write operation beyond the boundaries of an allocated buffer. Exploitation requires victims to open a malicious file or visit a harmful web page, which triggers the code execution in the context of the vulnerable application.

References