Remote Code Execution Vulnerability in OpenText Brava! Desktop

CVE-2021-31500

Summary

This vulnerability permits remote attackers to execute arbitrary code on vulnerable installations of OpenText Brava! Desktop 16.6.3.84. Exploitation requires user interaction, as the target must either visit a malicious web page or open a compromised file. The vulnerability arises from improper validation of user-supplied values during the parsing of DWF files, resulting in potential code execution in the context of the current user process. Awareness of this issue is critical to safeguarding against potential exploits.

References