Remote Code Execution Vulnerability in OpenText Brava! Desktop

CVE-2021-31511

Summary

This vulnerability affects OpenText Brava! Desktop Build 16.6.4.55 and allows remote attackers to execute arbitrary code by exploiting weaknesses in PDF file parsing. Successful exploitation requires user interaction, implicating that the targeted user must either visit a malicious webpage or open a compromised file. The vulnerability results from insufficient validation of untrusted input, allowing attackers to write beyond the bounds of allocated memory. By leveraging this oversight, an attacker can execute code within the context of the running process, potentially leading to system compromise.

References