Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.

Published

2018-10-19T22:29:01.367

Last Modified

2024-11-21T03:55:33.543

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Primary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	opendesign	drawings_sdk	2019	Yes
Application	oracle	outside_in_technology	8.5.3	Yes
Application	oracle	outside_in_technology	8.5.4	Yes

References

http://www.securityfocus.com/bid/105603 Third Party Advisory, VDB Entry ([email protected])
https://www.opendesign.com/security-advisories Vendor Advisory ([email protected])
https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/105603 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.opendesign.com/security-advisories Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)