Lucene search
+L

238 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/03/05 12:0 a.m.14 views

(0Day) Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2024/03/05 12:0 a.m.15 views

(0Day) Ashlar-Vellum Cobalt IGS File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7CVSS7.2AI score
SaveExploits0
NVD
NVD
added 2024/02/22 5:15 a.m.30 views

CVE-2024-23134

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS6.8AI score0.00488EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/22 5:15 a.m.19 views

Design/Logic Flaw

A maliciously crafted IGS file when tbb.dll parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.5AI score0.00488EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/22 4:27 a.m.12 views

CVE-2024-23134 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS6.6AI score0.00488EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/22 4:27 a.m.38 views

CVE-2024-23134 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS7.2AI score0.00488EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/22 4:27 a.m.3488 views

CVE-2024-23134

CVE-2024-23134 corresponds to a use-after-free in Autodesk AutoCAD triggered by parsing a malicious IGS file (tbb.dll). Multiple connected sources (ZDI advisory, Red Hat, NVD, CVE lists) confirm remote code execution potential when an affected IGS file is opened or viewed, with user interaction o...

7.8CVSS6.7AI score0.00488EPSS
SaveExploits0References3Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.15 views

Autodesk AutoCAD IGS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IG...

7.8CVSS7.2AI score0.00488EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.39 views

Siemens Tecnomatix Plant Simulation IGS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00239EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.47 views

Siemens Tecnomatix Plant Simulation IGS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00228EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.29 views

Siemens Tecnomatix Plant Simulation IGS File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00224EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.65 views

Siemens Parasolid Stack Buffer Overflow Vulnerability

Siemens Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing and free-form surface/drawing modeling. A stack buffer overflow vulnerability exists in Siemens Parasolid due to a stack overflow vulnerability contained in an affected...

7.8CVSS7.7AI score0.00228EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/10/11 12:0 a.m.84 views

Siemens Tecnomatix Plant Simulation File Analysis Vulnerability

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A file analysis vulnerability exists in Siemens...

7.8CVSS7.1AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/10 11:15 a.m.24 views

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

7.8CVSS7.6AI score0.00224EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/10 11:15 a.m.37 views

CVE-2023-45601

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

7.8CVSS7.7AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/10 11:15 a.m.10 views

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

7.8CVSS5.9AI score0.00224EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/10 11:15 a.m.28 views

Type confusion

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

4.4CVSS7.5AI score0.00224EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/10/10 11:15 a.m.29 views

Stack overflow

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

4.4CVSS7.7AI score0.00228EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/10/10 10:21 a.m.17 views

CVE-2023-45601

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

7.8CVSS7.7AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/10 10:21 a.m.43 views

CVE-2023-45601

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

7.8CVSS7.9AI score0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder