CVE-2021-31499

Vulnerability

This vulnerability affects OpenText Brava! Desktop version 16.6.3.84. The flaw exists in the parsing of DWF files, where the application fails to properly validate user-supplied data, leading to a write past the end of an allocated buffer. This out-of-bounds write can be triggered when a user opens a specially crafted DWF file or visits a malicious page that loads such a file [1].

Exploitation

An attacker can exploit this vulnerability by crafting a malicious DWF file and delivering it to the target, typically through a web page or email attachment. The victim must open the file or visit the malicious page using Brava! Desktop. No authentication or special privileges are required on the attacker's part. Once the file is processed, the out-of-bounds write occurs, corrupting memory in a way that can be leveraged for code execution [1].

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. This can lead to full compromise of the affected system, including data theft, installation of malware, or further lateral movement within the network. The CVSS score is 7.8 (High), with impacts on confidentiality, integrity, and availability [1].

Mitigation

As of the publication date of this advisory (June 15, 2021), no official patch or mitigation has been released by OpenText for this vulnerability. Users are advised to limit exposure by avoiding opening untrusted DWF files and exercising caution with links from unknown sources. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog [1].