What’s Vulnerable › Vulnerabilities

CVE-2021-35297

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-10-01 · updated 2026-06-17
• Weakness: CWE-120

Description

Scalabium dBase Viewer version 2.6 (Build 5.751) is vulnerable to remote code execution via a crafted DBF file that triggers a buffer overflow. An attacker can use the Structured Exception Handler (SEH) records and redirect execution to attacker-controlled code.

Affected products

• Scalabium Dbase Viewer: 2.6

References

• https://govtech-csg.github.io/security-advisories/2021/09/18/CVE-2021-35297.html
• https://govtech-csg.github.io/security-advisories/2021/09/18/CVE-2021-35297.html

Get alerted when CVE-2021-35297 or the next vulnerability affects your stack