CVE-2021-43272

Опубликовано: 14 нояб. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.

Ссылки

https://www.opendesign.com/security-advisories
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1358/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1360/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1363/
Third Party Advisory
VDB Entry
https://www.opendesign.com/security-advisories
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1358/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1360/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1363/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opendesign:oda_viewer:*:*:*:*:*:*:*:*

Версия до 2022.11 (исключая)

EPSS

Процентиль: 72%

0.00729

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-755

Связанные уязвимости

GHSA-x5h3-rqvh-323h

github

больше 3 лет назад