LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://code610.blogspot.com/2018/11/crashing-librecad-213.html | third party advisory exploit |
https://lists.debian.org/debian-lts-announce/2019/05/msg00005.html | mailing list |