Remote Code Execution Vulnerability in OpenText Brava! Desktop

CVE-2021-31513

Summary

This vulnerability permits remote attackers to execute arbitrary code on OpenText Brava! Desktop installations by leveraging a flaw in BMP file parsing. The vulnerability arises from insufficient validation of user-supplied data, which can lead to a write past the end of an allocated buffer. In order to exploit this issue, a user must either visit a malicious webpage or open a specially crafted file. Successful exploitation results in code execution within the context of the current process, highlighting the importance of vigilance against such threats.

References