CVE-2021-31482

Vulnerability

OpenText Brava! Desktop version 16.6.3.84 and possibly earlier versions contain an out-of-bounds write vulnerability in the parsing of DWF files. The flaw results from missing validation of user-supplied data, allowing a write past the end of an allocated buffer. User interaction is required because the target must open a malicious DWF file or visit a malicious page that opens such a file [1].

Exploitation

An attacker can exploit this vulnerability by crafting a malicious DWF file and convincing a user to open it (e.g., via email, web download, or link). No authentication or special network position is required beyond delivering the file to the user. When the vulnerable parsing code processes the crafted data, it performs an out-of-bounds write due to the lack of proper bounds checking [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. This can lead to full compromise of the affected system, including disclosure, modification, or destruction of data, and potential further lateral movement. The CVSS score is 7.8 (High) with vector AV:L/PR:N/UI:R/S:U/C:H/I:H/A:H [1].

Mitigation

As of the publication date (2021-06-15), no official fix from OpenText had been announced in the available references. Users should monitor vendor advisories and apply patches when released. Until a fix is available, the recommended mitigation is to avoid opening untrusted DWF files or visiting untrusted web pages that may trigger the vulnerability [1].