Remote Code Execution Vulnerability in OpenText Brava! Desktop Software
CVE-2021-31495

7.8HIGH

Key Information:

Vendor
Opentext
Status
Brava! Desktop
Vendor
CVE Published:
15 June 2021

Summary

This vulnerability affects OpenText Brava! Desktop due to improper validation of user-supplied data during the parsing of DXF files. Attackers can exploit this flaw by convincing a user to open a malicious file or visit a harmful webpage, potentially leading to memory corruption. Successful exploitation may result in arbitrary code execution within the context of the affected application, allowing unauthorized actions on the system. For further information, refer to the advisory by Zero Day Initiative.

Affected Version(s)

Brava! Desktop 16.6.3.84

References

https://www.zerodayinitiative.com/advisories/ZDI-21-635/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative
.