CVE-2021-25178
18.01.2021, 08:15
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| opendesign | drawings_software_development_kit | 𝑥 < 2021.11 |
| siemens | comos | 𝑥 < 10.4.1 |
| siemens | jt2go | 𝑥 < 13.1.0.1 |
| siemens | teamcenter_visualization | 𝑥 < 13.1.0.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References