CVE-2021-31484: high-severity vulnerability in OpenText Brava! Desktop
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
OpenText Brava! Desktop has a flaw in how it reads DWF files that allows attackers to run malicious code if you open a crafted file. This happens because the software doesn't properly check the file data before processing it.
A buffer overflow vulnerability exists in OpenText Brava! Desktop 16.6.3.84's DWF file parser due to insufficient input validation on user-supplied data, enabling out-of-bounds write conditions. Remote code execution is achieved through a user-assisted attack vector requiring interaction with a malicious DWF file or web content. The attacker gains arbitrary code execution with the privileges of the current process.
In the same product, most dangerous first.