ZDI-CAN-19186: ZDI-23-157: Open Design Alliance (ODA) Drawing SDK DGN File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance (ODA) Drawing SDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19186?
ZDI-CAN-19186 is classified as a critical vulnerability due to its ability to allow remote code execution.
How do I fix ZDI-CAN-19186?
To fix ZDI-CAN-19186, apply the latest patches or updates provided by Open Design Alliance for the Drawing SDK.
What systems are affected by ZDI-CAN-19186?
ZDI-CAN-19186 affects installations of the Open Design Alliance Drawing SDK.
What are the exploit requirements for ZDI-CAN-19186?
Exploitation of ZDI-CAN-19186 requires user interaction, such as visiting a malicious webpage or opening a malicious file.
What could be the impact of ZDI-CAN-19186 if exploited?
If exploited, ZDI-CAN-19186 could lead to arbitrary code execution on the affected systems, potentially compromising sensitive data.