CVEvulnerability
CVE-2018-18224
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-125
Description
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
Affected configurations
• opendesign drawings sdk 2019
• oracle outside in technology 8.5.3
• oracle outside in technology 8.5.4
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://www.securityfocus.com/bid/105603 Third Party Advisory, VDB Entry
- https://www.opendesign.com/security-advisories Vendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Vendor Advisory
- http://www.securityfocus.com/bid/105603 Third Party Advisory, VDB Entry
- https://www.opendesign.com/security-advisories Vendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Vendor Advisory