Open Design Alliance Drawings SDK
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or cause a denial-of-service condition.
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-32952US | high7.8 | — | ||
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied d… | ||||
| CVE-2021-32950US | high7.1 | — | ||
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied… | ||||
| CVE-2021-32948US | high7.8 | — | ||
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-suppli… | ||||
| CVE-2021-32944US | high7.8 | — | ||
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied dat… | ||||
| CVE-2021-32940US | high7.1 | — | ||
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supp… | ||||
| CVE-2021-32938US | high7.1 | — | ||
Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data.… | ||||
| CVE-2021-32936US | high7.8 | — | ||
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-sup… | ||||
| CVE-2021-32946US | high7.8 | — | ||
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper val… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-21-159-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-21-159-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan