Lucene search
+L

149 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.21 views

Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.6AI score0.00423EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.19 views

Autodesk AutoCAD CATPART File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.7AI score0.00436EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/22 10:58 a.m.40 views

CVE-2024-1848 Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024. These vulnerabilities...

7.8CVSS8.1AI score0.00269EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/22 12:0 a.m.12 views

PT-2024-18359 · Dassault Systèmes · Solidworks Desktop

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS Desktop version 2024 Description: Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in...

7.8CVSS7.9AI score0.00269EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2024/03/11 12:0 a.m.14 views

Dassault Systèmes eDrawings CATPART File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00338EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/03/08 12:0 a.m.19 views

Dassault Systèmes eDrawings CATPART File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.8AI score0.00338EPSS
Exploits0References1
NVD
NVD
added 2024/02/28 6:15 p.m.20 views

CVE-2024-1847

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

7.8CVSS7.9AI score0.00338EPSS
Exploits0References1
Prion
Prion
added 2024/02/28 6:15 p.m.24 views

Heap overflow

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

4.4CVSS8.1AI score0.00338EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/28 5:34 p.m.33 views

CVE-2024-1847 Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024...

7.8CVSS8.1AI score0.00338EPSS
Exploits0References1
OSV
OSV
added 2024/02/22 3:15 a.m.5 views

CVE-2024-23126

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.00418EPSS
Exploits0References2
NVD
NVD
added 2024/02/22 3:15 a.m.30 views

CVE-2024-23126

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.9AI score0.00418EPSS
Exploits0References2
Prion
Prion
added 2024/02/22 3:15 a.m.24 views

Stack overflow

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk AutoCAD can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.6AI score0.00418EPSS
Exploits0References1
CVE
CVE
added 2024/02/22 2:25 a.m.3508 views

CVE-2024-23126

CVE-2024-23126 affects Autodesk AutoCAD through CC5Dll.dll when parsing CATPART files, causing a stack-based overflow. The description and multiple sources indicate exploitation can crash the process, read sensitive data, or execute arbitrary code in the context of the current process. A ZDI advi...

7.8CVSS7.7AI score0.00418EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/22 2:25 a.m.16 views

CVE-2024-23126 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.7AI score0.00418EPSS
Exploits0References2
OSV
OSV
added 2024/02/22 2:15 a.m.2 views

CVE-2024-23123

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

7.8CVSS6.1AI score0.00639EPSS
Exploits0References3
NVD
NVD
added 2024/02/22 2:15 a.m.30 views

CVE-2024-23123

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

7.8CVSS7AI score0.00639EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/02/22 1:38 a.m.35 views

CVE-2024-23123 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

7.8CVSS7.3AI score0.00639EPSS
Exploits0References3
CVE
CVE
added 2024/02/22 1:38 a.m.3401 views

CVE-2024-23123

CVE-2024-23123 affects Autodesk AutoCAD when parsing CATPART files via CC5Dll.dll and ASMBASE228A.dll. The vulnerability is an out-of-bounds write in the parsing path, which can lead to a crash, data corruption, or execution of arbitrary code in the context of the current process. Exploitation co...

7.8CVSS7.7AI score0.00639EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/22 1:38 a.m.15 views

CVE-2024-23123 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

7.8CVSS7.8AI score0.00639EPSS
Exploits0References3
OSV
OSV
added 2024/02/22 12:15 a.m.7 views

CVE-2024-0446

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in t...

7.8CVSS6.1AI score0.00459EPSS
Exploits0References3
Rows per page
Query Builder