ZDI Reports Multiple RCE Vulnerabilities in Origin Viewer File Parsers

ZDI discloses multiple remote code execution flaws in OriginLab Origin Viewer file parsers requiring user interaction.

ZDI published advisories for multiple vulnerabilities in OriginLab Origin Viewer, affecting file parsing in formats including OGWU, OPJ, OGG and OPJU. The flaws include stack-based buffer overflows, heap-based buffer overflows and out-of-bounds writes, all enabling remote code execution. User interaction is required to exploit, as targets must visit a malicious page or open a malicious file. ZDI assigned a CVSS rating of 7.8 to each. No patches or mitigations are mentioned.