209 matches found
CVE-2022-40653
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40652
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40652
CVE-2022-40652 affects Ansys SpaceClaim 2022 R1 and involves a parsing flaw in X_B files. The issue allows an attacker to execute arbitrary code with the current process context by exploiting a write past the end of an allocated data structure during parsing. Exploitation requires user interactio...
CVE-2022-40651
Ansys SpaceClaim 2022 R1 is affected by a vulnerability in parsing of X_B files, caused by insufficient validation that allows a write past the end of an allocated data structure. This can enable remote code execution with user interaction (target must visit a malicious page or open a malicious f...
CVE-2022-40651
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40650
CVE-2022-40650 affects Ansys SpaceClaim 2022 R1. The vulnerability arises from parsing X_B files, where insufficient validation of user-supplied data leads to a write past the end of an allocated data structure. This can enable remote attackers to execute arbitrary code in the context of the curr...
CVE-2022-40650
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40649
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40649
CVE-2022-40649 affects Ansys SpaceClaim 2022 R1. The vulnerability stems from parsing X_B files where a pointer is not properly initialized, enabling a remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and is actionable in ...
CVE-2022-40648
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40648
CVE-2022-40648 affects Ansys SpaceClaim 2022 R1. The vulnerability resides in the parsing of X_B files, where insufficient validation leads to a write before the start of an allocated data structure, enabling arbitrary code execution. Exploitation requires user interaction (visit a malicious page...
CVE-2022-40647
CVE-2022-40647 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing X_B files, caused by insufficient validation, leading to an out-of-bounds read that can allow code execution in the target process. User interaction is required (target must open a malicious file/page). Multiple sources refer...
CVE-2022-40646
CVE-2022-40646 affects Ansys SpaceClaim 2022 R1. The root cause is an uninitialized pointer during parsing of X_B files, allowing remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and can execute code in the context of the ...
CVE-2022-40647
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40646
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40645
CVE-2022-40645 affects Ansys SpaceClaim 2022 R1. Root cause: uninitialized pointer in the parsing of X_B files, leading to arbitrary code execution. Exploitation requires user interaction (target must visit a crafted page or open a malicious file). CVSS data in the initial documents indicates a H...
CVE-2022-40645
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40644
CVE-2022-40644 involves Ansys SpaceClaim 2022 R1 where the X_B file parser lacks proper validation, causing an out-of-bounds write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is tied to ZDI-CAN-17408...
CVE-2022-40644
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40643
CVE-2022-40643 affects Ansys SpaceClaim 2022 R1. The issue is an uninitialized pointer in the parsing of X_B files, enabling remote code execution with user interaction (target must visit a malicious page or open a malicious file). Referenced advisories (e.g., ZDI-22-1199) document this vector. N...