Lucene search
K

15 matches found

CNVD
CNVD
added 2024/06/28 12:0 a.m.5 views

Autodesk AutoCAD Out-of-Bounds Write Vulnerability (CNVD-2024-32999)

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. An out-of-bounds write vulnerability exists in Autodesk AutoCAD version 2024.1.4, which stems from a lack of proper validation of user-supplied data when parsing maliciously crafted CATPART files...

7.8CVSS7.3AI score0.00434EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/06/25 3:15 a.m.3 views

CVE-2024-23147

A maliciously crafted CATPART, XB and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the...

7.8CVSS5.8AI score0.00531EPSS
Exploits0References2Affected Software9
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.2 views

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. A memory corruption vulnerability exists in Autodesk AutoCAD version 2024.1.4, which originates from a write access conflict when parsing maliciously crafted CATPART, XB, and STEP files in...

7.8CVSS6.9AI score0.00531EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.17 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.6AI score0.00434EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.22 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.7AI score0.00434EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.11 views

Autodesk AutoCAD CATPART File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.7AI score0.00436EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/22 12:0 a.m.1 views

PT-2024-18359 · Dassault Systèmes · Solidworks Desktop

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS Desktop version 2024 Description: Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in...

7.8CVSS7.9AI score0.00076EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.18 views

Autodesk AutoCAD CATPART File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00107EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/09/19 12:0 a.m.21 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.4AI score0.00312EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/19 12:0 a.m.17 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.4AI score0.00312EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/09/19 12:0 a.m.23 views

Autodesk AutoCAD CATPART File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.3AI score0.00297EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/24 12:0 a.m.2 views

PT-2023-5413 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2023 through 2024 Description: The issue is related to a memory corruption vulnerability when parsing certain file types, including SLDASM, MODEL, SAT, and CATPART files. This vulnerability can be exploited to execut...

9.8CVSS9.6AI score0.00297EPSS
Exploits0References9
Cvelist
Cvelist
added 2021/05/27 3:37 p.m.14 views

CVE-2021-27488

Datakit Software libraries CatiaV53dRead, CatiaV63dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing CATPart files. This could result in an out-of-bounds write past the end of an allocated structure. An...

7.9AI score0.00404EPSS
Exploits0References3
CVE
CVE
added 2021/05/27 3:37 p.m.59 views

CVE-2021-27488

CVE-2021-27488 affects Datakit CrossCAD/Ware libraries (CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr) embedded in Luxion KeyShot up to v10.1. The vulnerability stems from improper validation when parsing CATPart files, enabling an out-of-bounds write and potential code exe...

7.8CVSS7.7AI score0.00404EPSS
Exploits0References3Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/05/12 12:0 a.m.37 views

(0Day) Siemens Solid Edge Viewer CATPart File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00404EPSS
Exploits0
Rows per page
Query Builder