PT-2023-31893
CVE-2023-5179
·
Publicado
2023-11-07
·
Atualizado
2023-11-14
Descrição por
CVSS 3.1
7.8
AltaMétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Open Design Alliance Drawings SDK versions prior to 2024.10
Description
An issue in the Open Design Alliance Drawings SDK allows attackers to cause a crash or potentially enable code execution through a denial-of-service attack. This occurs when a corrupted value for the start of a MiniFat sector in a crafted DGN file leads to an out-of-bounds read.
Recommendations
For versions prior to 2024.10, update to version 2024.10 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾