Buffer Overflow Vulnerability in LibreCAD Affects Remote Code Execution
CVE-2021-45342

7.8HIGH

Key Information:

Vendor

Librecad

Status
Vendor
CVE Published:
25 January 2022

What is CVE-2021-45342?

A buffer overflow vulnerability present in the CDataList of the jwwlib component within LibreCAD versions up to 2.2.0-rc3 enables attackers to execute arbitrary code remotely. By crafting a malicious JWW document, a potential attacker can exploit this vulnerability, leading to unauthorized code execution within the target system. This issue emphasizes the importance of keeping software updated to mitigate such risks.

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.