CVE-2022-40636

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Ansys SpaceClaim 资源管理错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys. Ansys SpaceClaim 2022 R1 suffers from a Resource Management Error vulnerability that stems from a specific flaw in the parsing of JT files that lacks validation of the existence of an object before performing an operation on it, which...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of JT files that lacks proper validation of user-supplied data, which could result in reading beyond the end o...

(0Day) Ansys SpaceClaim JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

(0Day) Ansys SpaceClaim JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

PT-2022-25432 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-25433 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

Siemens JT2Go and Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2022-51433)

JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML, and available JT, VFZ, CGM, and TIF data. teamcenter Visualization enables companies to enhance their product lifecycle management PLM environments with a comprehensive family of visualization solutions. The...

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to execute arbitrary code.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to the re-release of memory during syntax analysis of CGM files. Exploiting this vulnerability could allow attackers...

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

The vulnerability of the CGM_NIST_Loader.dll library, a tool for 3D JT and JT2Go viewing, as well as the Teamcenter Visualization lifecycle management system, allows attackers to trigger a service failure.

The vulnerability of the CGMNISTLoader.dll library, used by the 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to errors in pointer assignment during CGM file syntax analysis. Exploiting this vulnerability can allow attackers t...

The vulnerability of the Tiff_Loader.dll library, a tool for 3D JT JT2Go viewing and Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the TiffLoader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, stems from a cycle that requires an unavailable exit condition during syntax analysis of TIFF files. Exploiting this vulnerability can...

CVE-2022-27867

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

Design/Logic Flaw

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-27867

CVE-2022-27867 affects Autodesk AutoCAD 2019–2022 where a maliciously crafted JT file can trigger a use-after-free vulnerability, potentially enabling code execution. The core issue is a use-after-free in the handling of JT data (as described in multiple sources such as NVD/Red Hat/CNVD/CVE listi...

CVE-2022-27867

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

Malicious code in jt.timepicker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47a0b07aee28bdab6c6f9a7b37f181acc520927221ccca05964d7ddf0e373bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-32240

When a user opens manipulated Jupiter Tesselation .jt, JTReader.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-32240

When a user opens manipulated Jupiter Tesselation .jt, JTReader.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...