CVE-2018-18223
published 2018-10-19CVE-2018-18223: Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information…
PriorityP434high8.1CVSS 3.0
AVNACLPRNUIRSUCHINAH
EPSS
2.16%
80.3th percentile
Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| opendesign | drawings_sdk | — | — |
| oracle | outside_in_technology | — | — |
| oracle | outside_in_technology | — | — |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/105603https://www.opendesign.com/security-advisorieshttps://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlhttp://www.securityfocus.com/bid/105603https://www.opendesign.com/security-advisorieshttps://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
2018-10-19
Published