CVE-2021-45342

Description

A buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and older allows an attacker to achieve Remote Code Execution using a crafted JWW document.

References

https://www.debian.org/security/2022/dsa-5077

https://security.gentoo.org/glsa/202305-26

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUMH3CWGVSMR2UIZEA35Q5UB7PDVVVYS/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCC2FZ6HZOIK3775K4MTCOUHX6PLGPEL/

https://github.com/LibreCAD/LibreCAD/issues/1464

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3