Remote Code Execution Vulnerability in OpenText Brava! Desktop Software

CVE-2021-31492

What is CVE-2021-31492?

This vulnerability in OpenText Brava! Desktop allows attackers to execute arbitrary code through the exploitation of improperly validated DWF file inputs. By convincing a user to open a malicious file or visit a malicious web page, an attacker can exploit this flaw due to improper handling of user-supplied data, leading to a potential buffer overflow. As a result, the attacker can execute code within the context of the current process, compromising the security of the application and the system.

References