Описание
An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
Ссылки
- PatchThird Party Advisory
- Vendor Advisory
- PatchThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2021.6 (исключая)
cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*
Конфигурация 2Версия до 10.4.1 (исключая)
cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 55%
0.00321
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
EPSS
Процентиль: 55%
0.00321
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787