CVE-2021-31490

Vulnerability

OpenText Brava! Desktop version 16.6.3.84 contains a vulnerability in the parsing of DWF files. The flaw results from the lack of proper validation of user-supplied data, which can cause a write past the end of an allocated buffer. User interaction is required; the target must open a malicious DWF file or visit a page that triggers the parsing [1].

Exploitation

To exploit this vulnerability, an attacker must convince the user to open a specially crafted DWF file (or visit a malicious page that loads the file). No authentication or special network position is required beyond the ability to deliver the file to the user on an affected OpenText Brava! Desktop installation. The corruption occurs during the DWF parsing code path, allowing the attacker to control the write past the buffer boundary [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. This results in a complete compromise of confidentiality, integrity, and availability of the user's session and data (CVSS 7.8, AV:L/PR:N/UI:R/S:U/C:H/I:H/A:H) [1].

Mitigation

As of the publication date (June 15, 2021), OpenText had not released a patch for this vulnerability. The ZDI advisory [1] recommends restricting user interaction with untrusted DWF files or using alternate products until a fix is available. No KEV listing or workaround details are provided in the available references.