5143 matches found
Autodesk Navisworks code issue vulnerability
Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. A code issue vulnerability exists in Autodesk Navisworks, which can be exploited by attackers to execute code via a maliciously crafted DLL file...
Bentley Systems Bentley View buffer error vulnerability
Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to an out-of-bounds write vulnerability that stems from a boundary error when handling JT files. An attacker could exploit the vulnerability to create a specially crafted JT file and trick a victim into opening th...
CVE-2021-43279
An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...
3D Printing and Engineering; an Overview
By Owais Sultan 3D Printing relies on tools such as 3D software to get the job done. One might wonder, how does everything work here? This is a post from HackRead.com Read the original post: 3D Printing and Engineering; an Overview...
3d-pechat-spb.ru Improper Access Control vulnerability OBB-2260411
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-M539-J985-HCR8 Crash in `max_pool3d` when size argument is 0 or negative
Impact The Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative: python import tensorflow as tf poolsize = 2, 2, 0 layer = tf.keras.layers.MaxPooling3Dstrides=1, poolsize=poolsize inputtensor = tf.random.uniform3, 4, 10, 11, 12, dtype=tf.float32 r...
[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates
On what might seem a relatively calm Patch Tuesday with 55 vulnerabilities being patched, the fact that six of them were rated “Critical” and two of them actively exploited spoils the Zen factor somewhat. Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and...
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Excel and Exchange Server that could be abused t...
Remote code execution
3D Viewer Remote Code Execution Vulnerability...
Remote code execution
3D Viewer Remote Code Execution Vulnerability...
CVE-2021-43209 3D Viewer Remote Code Execution Vulnerability
...
CVE-2021-43209
CVE-2021-43209 is a Microsoft 3D Viewer remote code execution vulnerability. The connected sources confirm two related 3D Viewer issues and state that updates patch the flaws; specifically, app package versions 7.2107.7012.0 and later contain the fix. The CVE is rated High (CVSSv3.1: 7.8) with lo...
CVE-2021-43208
CVE-2021-43208 is a Microsoft 3D Viewer remote code execution vulnerability. Connected sources indicate two important RCE issues in the 3D Viewer that were patched in a Microsoft update, with affected App package versions prior to 7.2107.7012.0 and updates included in the November 2021 Patch Tues...
CVE-2021-43208 3D Viewer Remote Code Execution Vulnerability
...
CVE-2021-43208 3D Viewer Remote Code Execution Vulnerability
...
Microsoft 3D Viewer remote code execution vulnerability
A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...
CVE-2021-43208: Improper Control of Generation of Code
3D Viewer Remote Code Execution Vulnerability...
CVE-2021-43209: Undefined Security Weakness
3D Viewer Remote Code Execution Vulnerability...
