CVE-2021-31500

Vulnerability

This vulnerability affects OpenText Brava! Desktop version 16.6.3.84. The flaw exists in the parsing of DWF files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. User interaction is required to trigger the vulnerability; the target must visit a malicious page or open a malicious file.

Exploitation

An attacker can exploit this vulnerability by crafting a malicious DWF file and hosting it on a web page or distributing it as an email attachment. The victim must open the file or visit the page using the affected application. No additional privileges are required, and the attack does not require authentication.

Impact

Successful exploitation allows an attacker to execute arbitrary code in the context of the current process. This can lead to full compromise of the victim's system, including disclosure of sensitive information, modification of data, or denial of service.

Mitigation

OpenText has not released an official patch at the time of publication. The vulnerability is listed in the Zero Day Initiative advisory ZDI-21-640 [1]. As a workaround, users should avoid opening DWF files from untrusted sources and consider using an alternative viewer until a fix is available.