关键信息 漏洞名称 Attack: VariCAD 2010 DWB File Buffer Overflow 严重性 Severity: High 描述 This signature detects attempts to exploit a buffer overflow vulnerability in VariCAD which could result in remote code execution. 额外信息 VariCAD 2010 and VariCAD Viewer are CAD applications available for Microsoft Windows and Linux. The applications are prone to a remote buffer overflow vulnerability because they fail to perform adequate checks on user-supplied input. Specifically, this issue occurs when opening a specially crafted 'DWB' file. Successful exploits may allow remote attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions. 影响版本 VariCAD 2010 2.09 and VariCAD Viewer are vulnerable. Other versions may also be affected. 参考资源 SecurityFocus BID: 38015