Information Disclosure Vulnerability in OpenText Brava! Desktop Software

CVE-2021-31506

Summary

A vulnerability exists in OpenText Brava! Desktop that permits remote attackers to disclose sensitive information through malicious PDF files. The flaw arises from the inadequate validation of user-supplied data during the PDF parsing process, which can lead to the ability to read beyond the end of an allocated data structure. Successful exploitation of this issue requires user interaction, as the victim must either visit a malicious webpage or open a compromised file. This vulnerability may also be exploited in conjunction with other vulnerabilities to execute arbitrary code within the context of the current process.

References