Vulnerability Spotlight: Multiple code execution vulnerabilities in LibreCAD

guest · Nov 18, 2021

Vulnerability Spotlight: Multiple code execution vulnerabilities in LibreCAD
November 17, 2021
https://blog.talosintelligence.com/2021/11/libre-cad-vuln-spotlight-.html

Cisco Talos recently discovered three vulnerabilities in LibreCAD’s libdfxfw open-source library.

This library reads and writes .dxf and .dwg files — the primary file format for vector graphics in CAD software. LibreCAD, a free computer-aided design software for 2-D models, uses this libdfxfw.
Click to expand...

TALOS-2021-1349 (CVE-2021-21898) and TALOS-2021-1350 (CVE-2021-21899) can trigger buffer overflows if an attacker tricks the user into opening a specially crafted DWG file, eventually allowing the attacker to execute code on the victim machine. TALOS-2021-1351 (CVE-2021-21900) works in a similar manner, but with a DXF file instead.
Click to expand...

Users are encouraged to update these affected products as soon as possible: LibreCad libdxfrw, version 2.2.0-rc2-19-ge02f3580. Talos tested and confirmed these versions of the library could be exploited by this vulnerability.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Multiple code execution vulnerabilities in LibreCAD

guest Guest

Log in or Sign up

Vulnerability Spotlight: Multiple code execution vulnerabilities in LibreCAD

guest Guest

Useful Searches