CVE-2021-21897

September 16, 2021

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Summary:

A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0. A specially-crafted .dxf file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Reference Links(if available):

  • https://talosintelligence.com/vulnerability_reports/TALOS-2021-1346

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • Tags: , , , ,

    You may have missed

    image

    [KILLSEC] – Ransomware Victim: PT Pertamina

    December 20, 2024
    image

    [FOG] – Ransomware Victim: Howell Township Public Schools (howell[.]k12[.]nj[.]us)

    December 20, 2024
    image

    [FOG] – Ransomware Victim: EP Holdings (epholdingsinc[.]com)

    December 20, 2024
    Cobalt-Strike

    Cobalt Strike Beacon Detected – 101[.]36[.]117[.]41:8880

    December 20, 2024
    Cobalt-Strike

    Cobalt Strike Beacon Detected – 47[.]242[.]206[.]77:8888

    December 20, 2024