high7.8
CVE-2021-35297
Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow.
Impact
Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler (SEH) records and redirect execution to attacker-controlled code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scalabium | Dbase Viewer | Version 2.6 |