CVEvulnerability
CVE-2021-43272
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-755
Description
An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected configurations
• opendesign oda viewer (< 2022.11)
Related
Weakness · CWE (1)
- CWE-755 Improper Handling of Exceptional Conditions weakness
References
- https://www.opendesign.com/security-advisories Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1358/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-1360/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-1363/ Third Party Advisory, VDB Entry
- https://www.opendesign.com/security-advisories Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-1358/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-1360/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-1363/ Third Party Advisory, VDB Entry