Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40650

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40650

CVE-2022-40650 affects Ansys SpaceClaim 2022 R1. The vulnerability arises from parsing X_B files, where insufficient validation of user-supplied data leads to a write past the end of an allocated data structure. This can enable remote attackers to execute arbitrary code in the context of the curr...

CVE-2022-40649

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40648

CVE-2022-40648 affects Ansys SpaceClaim 2022 R1. The vulnerability resides in the parsing of X_B files, where insufficient validation leads to a write before the start of an allocated data structure, enabling arbitrary code execution. Exploitation requires user interaction (visit a malicious page...

CVE-2022-40646

CVE-2022-40646 affects Ansys SpaceClaim 2022 R1. The root cause is an uninitialized pointer during parsing of X_B files, allowing remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and can execute code in the context of the ...

CVE-2022-40647

CVE-2022-40647 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing X_B files, caused by insufficient validation, leading to an out-of-bounds read that can allow code execution in the target process. User interaction is required (target must open a malicious file/page). Multiple sources refer...

CVE-2022-40646

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40645

CVE-2022-40645 affects Ansys SpaceClaim 2022 R1. Root cause: uninitialized pointer in the parsing of X_B files, leading to arbitrary code execution. Exploitation requires user interaction (target must visit a crafted page or open a malicious file). CVSS data in the initial documents indicates a H...

CVE-2022-40644

CVE-2022-40644 involves Ansys SpaceClaim 2022 R1 where the X_B file parser lacks proper validation, causing an out-of-bounds write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is tied to ZDI-CAN-17408...

CVE-2022-40644

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40643

CVE-2022-40643 affects Ansys SpaceClaim 2022 R1. The issue is an uninitialized pointer in the parsing of X_B files, enabling remote code execution with user interaction (target must visit a malicious page or open a malicious file). Referenced advisories (e.g., ZDI-22-1199) document this vector. N...

CVE-2022-40639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40637

This CVE-2022-40637 affects Ansys SpaceClaim 2022 R1 and involves a JT file parsing flaw. The root cause is failure to validate the existence of an object before performing operations on it, enabling an attacker to achieve remote code execution with the current process context after user interact...

Ansys SpaceClaim 缓冲区错误漏洞

Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files, where a pointer is not properly initialized before being accessed, and can be exploited by an...