Arbitrary Code Execution Vulnerability in OpenText Brava! Desktop by OpenText

CVE-2021-31510

Summary

This vulnerability permits remote attackers to execute arbitrary code on installations of OpenText Brava! Desktop Build 16.6.4.55. It arises from improper validation of user-supplied data during the parsing of TIF files, which can lead to a read past the end of an allocated buffer. User interaction is required for exploitation, as the target must either visit a malicious webpage or open a harmful file. An attacker can exploit this to execute code within the context of the current process.

References