Remote Code Execution in OpenText Brava! Desktop by OpenText

CVE-2021-31491

Summary

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. Exploitation requires user interaction, as the target must either visit a malicious webpage or open a corrupt file. The flaw lies in the improper validation of user-supplied DWF files, which can lead to a buffer overflow. An attacker can exploit this oversight to execute code within the context of the application, potentially compromising system integrity and confidentiality.

References