Lucene search
K

18 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.5 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.0025EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.5 views

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.0021EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.5 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.0025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/12 8:36 a.m.28 views

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

7.8CVSS0.00166EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/12 8:36 a.m.2 views

CVE-2025-40829

A vulnerability has been identified in Simcenter Femap All versions V2512. The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. ZDI-CAN-27146...

7.8CVSS7AI score0.00166EPSS
Exploits0References1
CVE
CVE
added 2024/10/29 9:14 p.m.63 views

CVE-2024-8600

CVE-2024-8600 concerns Autodesk AutoCAD, where parsing a malicious SLDPRT file via the odxsw_dll.dll component can trigger a memory corruption vulnerability in the current process. The affected vector is local, with user interaction required, and the impact is described as potential crash, data d...

7.8CVSS7.8AI score0.00207EPSS
Exploits0References1Affected Software8
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.18 views

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.5AI score0.00968EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/22 2:23 a.m.18 views

CVE-2024-23125 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDPRT file when parsed ODXSWDLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00396EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.2 views

PT-2024-7253

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to a Heap-based Overflow vulnerability in the ODXSW DLL.dll library of Autodesk applications, specifically when parsing maliciously crafted SLDPRT files. This ca...

7.8CVSS7.3AI score0.00403EPSS
Exploits0References7
OSV
OSV
added 2023/04/20 7:15 p.m.4 views

CVE-2023-22321

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

5.5CVSS6.2AI score0.0021EPSS
Exploits0References1
Prion
Prion
added 2023/04/20 7:15 p.m.13 views

Design/Logic Flaw

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

1.9CVSS5.9AI score0.0021EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/04/20 6:16 p.m.43 views

CVE-2023-23579

Datakit CrossCadWare_x64.dll contains an out-of-bounds write while parsing a specially crafted SLDPRT file, enabling code execution in the context of the current process. The vulnerability is associated with Datakit’s CrossCAD/Ware library used by Siemens Solid Edge; the CVE-2023-23579 entry is e...

7.8CVSS7.7AI score0.00235EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/20 6:12 p.m.12 views

CVE-2023-22321 Datakit CrossCAD/Ware

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

3.3CVSS5.6AI score0.0021EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/02/17 12:0 a.m.5 views

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. An out-of-bounds write vulnerability exists in Siemens Solid Edge due to the Datakit CrossCadWarex64.dll used in the affected product, which contains out-of-bounds writes beyond the end of the allocated buffer when parsing...

7.8CVSS7.5AI score0.00235EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.4 views

PT-2023-1975 · Datakit +1 · Crosscadware X64.Dll +1

Name of the Vulnerable Software and Affected Versions: Datakit CrossCadWare x64.dll affected versions not specified Description: The issue is related to an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execut...

7.8CVSS7.5AI score0.00235EPSS
Exploits0References9
OSV
OSV
added 2021/06/15 7:15 p.m.4 views

CVE-2021-31481

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS6.2AI score0.01419EPSS
Exploits0References3
Prion
Prion
added 2021/06/15 7:15 p.m.17 views

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS7.8AI score0.01419EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2021/06/02 12:0 a.m.6 views

OpenText Brava! 安全漏洞

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An untrusted pointer dereference vulnerability exists in the parsing of SLDPRT files in OpenText Brava! Desktop. The vulnerability stems from failure to properly...

7.8CVSS5.9AI score0.01419EPSS
Exploits0References4
Rows per page
Query Builder