SXF Common Library CVE-2015-2946 Buffer Overflow Vulnerability
BID:74781
Info
SXF Common Library CVE-2015-2946 Buffer Overflow Vulnerability
| Bugtraq ID: | 74781 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2015-2946 |
| Remote: | Yes |
| Local: | No |
| Published: | May 22 2015 12:00AM |
| Updated: | May 22 2015 12:00AM |
| Credit: | akira_you of Nico-TECH |
| Vulnerable: |
Open CAD Format Council SXF Common Library 3.21 |
| Not Vulnerable: |
Open CAD Format Council SXF Common Library 3.30 |
Discussion
SXF Common Library CVE-2015-2946 Buffer Overflow Vulnerability
SXF Common Library is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
SXF Common Library 3.21 and prior are vulnerable.
SXF Common Library is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
SXF Common Library 3.21 and prior are vulnerable.
References
SXF Common Library CVE-2015-2946 Buffer Overflow Vulnerability
References:
References:
- SXF Common Library download page (Open CAD Format Council)
- SXF Common Library vulnerable to buffer overflow (JPCERT)