Remote Code Execution Flaw in OpenText Brava! Desktop by OpenText

CVE-2021-31490

Summary

This security weakness in OpenText Brava! Desktop affects version 16.6.3.84 and allows remote attackers to execute arbitrary code. The vulnerability arises from improper validation of user input while parsing DWF files, leading to potential buffer overflows. Successful exploitation requires user interaction, such as visiting a malicious webpage or opening a compromised file. Once triggered, attackers can execute code in the context of the affected process, posing significant risks to system integrity and data security.

References