Open Design Alliance Drawing SDK
Advisory ansehen veröffentlicht 2023-12-19
Successful exploitation of this vulnerability could allow remote attackers to disclose sensitive information on affected installations of ODA Drawing SDK.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-22670US | high7.8 | — | ||
A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files.… | ||||
| CVE-2023-22669US | high7.8 | — | ||
Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length he… | ||||
| CVE-2023-26495US | high7.8 | — | ||
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-353-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-353-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories - MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories - MitigationDrawing SDK
Please see ODA security advisory 24.1 and 23.6 for more information.
https://www.opendesign.com/security-advisories
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan