CVE-2022-40642

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40642

CVE-2022-40642 affects Ansys SpaceClaim 2022 R1. The vulnerability is in the parsing of X_B files and arises from a lack of proper initialization of a pointer before use, allowing remote code execution with user interaction required (target must open a malicious page or file). Documented by ZDI a...

CVE-2022-40641

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40641

CVE-2022-40641 affects Ansys SpaceClaim 2022 R1. The issue is an out-of-bounds write in the parsing of X_B files, caused by inadequate validation of user-supplied data, which can allow code execution in the context of the current process. Exploitation requires user interaction (the target must vi...

CVE-2022-40640

CVE-2022-40640 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files, causing a read-before-start of an allocated data structure and enabling code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); advisories (e.g., ZDI-22-11...

CVE-2022-40639

CVE-2022-40639 affects Ansys SpaceClaim 2022 R1. The vulnerability is a use-after-free in the SKP file parsing path caused by not validating object existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user...

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40638

CVE-2022-40638 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files where code can run without validating whether an object exists, enabling a remote code execution when a user opens a malicious file or visits a malicious page. The issue is a use-after-free-like condition that ca...

CVE-2022-40638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40637

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40636

CVE-2022-40636 affects Ansys SpaceClaim 2022 R1. The root cause is a parsing flaw in JT files that allows reading beyond allocated buffers, enabling remote code execution. Exploitation requires user interaction (target visits a malicious page or opens a malicious file). The vulnerability is docum...

CVE-2022-40636

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40637

This CVE-2022-40637 affects Ansys SpaceClaim 2022 R1 and involves a JT file parsing flaw. The root cause is failure to validate the existence of an object before performing operations on it, enabling an attacker to achieve remote code execution with the current process context after user interact...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files, where a pointer is not properly initialized before being accessed, and can be exploited by an...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files, where a pointer is not properly initialized before being accessed, and can be exploited by an...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from the parsing of XB files without proper validation of user-supplied data could result in writes beyond the end of the allocated data structure...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a lack of proper validation of user-supplied data in the parsing of XB files could result in a write operation being performed prior to the...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from the parsing of XB files without proper validation of user-supplied data could result in reading beyond the end of an allocated data structure...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A security vulnerability exists in Ansys SpaceClaim 2022 R1 that stems from a specific flaw in the parsing of XB files that lacks proper validation of user-supplied data, which could lead to writes beyond the end of the...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files that lacks proper validation of user-supplied data, which could result in writes beyond the end of...