SolidWorks Sldimdownload ActiveX Control Arbitrary Code Execution

The remote host contains a version of the 'sldimdownload' ActiveX control included with SolidWorks' 3D CAD software. The version of this ActiveX control on the remote host fails to sanitize input to the 'installerpath' and 'applicationarguments' parameters of the 'Run' method. If an attacker can...

SolidWorks sldimdownload ActiveX control fails to restrict access to methods

Overview The SolidWorks sldimdownload ActiveX control contains methods that can allow a remote, unauthenticated attacker to run arbitrary code on a vulnerable system. Description SolidWorks provides 3D CAD software solutions. The SolidWorks sldimdownload ActiveX control is provided by the file...