Information Disclosure Vulnerability in OpenText Brava! Desktop

CVE-2021-31501

Summary

This vulnerability allows remote attackers to disclose sensitive information on installations of OpenText Brava! Desktop 16.6.3.84. Exploitation requires user interaction, where the target must visit a malicious webpage or open a compromised file. The vulnerability stems from improper validation of user-supplied data during the parsing of DWG files, potentially leading to reading past the end of an allocated data structure. This flaw can be leveraged in combination with other vulnerabilities to execute arbitrary code within the context of the affected process.

References