Open Design Alliance Drawing SDK
view advisory published 2023-12-19
Successful exploitation of this vulnerability could allow remote attackers to disclose sensitive information on affected installations of ODA Drawing SDK.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-22670US | high7.8 | — | ||
A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files.… | ||||
| CVE-2023-22669US | high7.8 | — | ||
Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length he… | ||||
| CVE-2023-26495US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage th… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-353-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-353-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (3)
- MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories - MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories - MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan