Lucene search
HistoryJul 12, 2023 - 8:15 a.m.
CVE-2023-2762
sldprt file
arbitrary code execution
security vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
50.5%
A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.
Affected configurations
Node
3ds3dexperience_solidworksRange2021–2023
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 3ds | 3dexperience_solidworks | * | cpe:2.3:a:3ds:3dexperience_solidworks:*:*:*:*:*:*:*:* |
References
Related
zdi
zdi
cve
cve
CVE-2023-2762
2023-07-12 08:15:09
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-07-12 08:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
50.5%
Related for NVD:CVE-2023-2762