Buffer Overflow Vulnerability in Importshp Plugin for LibreCAD
CVE-2023-30259

5.5MEDIUM

Key Information:

Vendor

Librecad

Status
Librecad
Vendor
CVE Published:
28 June 2023

What is CVE-2023-30259?

The importshp plugin in LibreCAD version 2.2.0 has a Buffer Overflow vulnerability that enables attackers to exploit improperly handled DBF files. By manipulating the content of these files, malicious actors can extract sensitive data from the system, potentially leading to unauthorized information disclosure. Users of this version are urged to be cautious and consider updating to mitigate the risks associated with this vulnerability.

References

https://github.com/LibreCAD/LibreCAD/issues/1481

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.