CVE:CVE-2021-40391
CNNVD:CNNVD-202111-463
Gerbv是一个 Gerber 文件（仅限 Rs-274X）查看器。用于查看 Rs-274X Gerber 文件、Excellon 钻孔文件和 Pick-N-Place 文件。
Gerbv 存在安全漏洞，该漏洞源于drill 格式 T-code 工具编号函数中存在越界写入漏洞，一个专门制作的drill文件可以导致代码的执行。攻击者可利用该漏洞可以提供恶意文件来触发此漏洞。
solution:Upgrade gerbv_project gerbv to a higher version than 2.7.0,2.7.0:dev,2.7.0:forked_dev,and avoid the version 2.7.0,2.7.0:dev,2.7.0:forked_dev; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 36,and avoid the version 36