ZDI-23-125: Open Design Alliance (ODA) Drawing SDK DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance (ODA) Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-125?
The severity of ZDI-23-125 is high as it allows remote code execution if exploited.
How do I fix ZDI-23-125?
To fix ZDI-23-125, update the Open Design Alliance Drawing SDK to the latest version that addresses this vulnerability.
Who is affected by ZDI-23-125?
ZDI-23-125 affects installations of Open Design Alliance Drawing SDK that have not implemented necessary security patches.
What is required for ZDI-23-125 to be exploited?
User interaction is required for ZDI-23-125 to be exploited, such as visiting a malicious website or opening a malicious file.
What can an attacker do with ZDI-23-125?
An attacker can execute arbitrary code on a vulnerable system through ZDI-23-125.