Lucene search
+L

340 matches found

OSV
OSV
•added 2023/07/12 8:15 a.m.•16 views

CVE-2023-2762

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

7.8CVSS6.1AI score0.0036EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/12 8:15 a.m.•35 views

Heap overflow

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while...

4.4CVSS7.9AI score0.00354EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/07/12 8:15 a.m.•26 views

Design/Logic Flaw

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

4.4CVSS7.8AI score0.0036EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/07/12 7:05 a.m.•49 views

CVE-2023-2763 Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while...

7.8CVSS8.1AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/12 7:05 a.m.•90 views

CVE-2023-2763

SOLIDWORKS Desktop (Release SOLIDWORKS 2021–2023) is affected in its DWG/DXF file reading procedure. The root cause is Use-After-Free, out-of-bounds write, and heap-based buffer overflow when parsing crafted DWG/DXF files, potentially allowing arbitrary code execution upon opening such files. Som...

7.8CVSS7.9AI score0.00354EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/12 7:05 a.m.•19 views

CVE-2023-2763 Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while...

7.8CVSS8.1AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/07/12 7:05 a.m.•19 views

CVE-2023-2762 Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

7.8CVSS7.6AI score0.0036EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/12 7:05 a.m.•52 views

CVE-2023-2762 Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

7.8CVSS7.9AI score0.0036EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/12 7:05 a.m.•59 views

CVE-2023-2762

Summary of CVE-2023-2762 (SOLIDWORKS Desktop) A Use-After-Free vulnerability exists in the SLDPRT file reading procedure affecting SOLIDWORKS Desktop from release 2021 through 2023. The underlying issue occurs during parsing of SLDPRT files and could allow an attacker to execute arbitrary code wh...

7.8CVSS7.7AI score0.0036EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•3 views

CVE-2023-2763: Use After Free

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while...

7.8CVSS7.8AI score0.00354EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•17 views

SolidWorks 资源管理错误漏洞

SolidWorks is a 3D CAD software from SolidWorks that runs on the Microsoft Windows platform. A security vulnerability exists in SolidWorks versions 2021 through 2023, which stems from the presence of a post-release reuse vulnerability during file reading that could allow an attacker to execute...

7.8CVSS7.8AI score0.0036EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/07/12 12:00 a.m.•50 views

Dassault Systèmes SolidWorks SLDPRT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/12 12:00 a.m.•23 views

PT-2023-21267 · Dassault Systèmes · Solidworks

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS Desktop versions Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 Description: The issue exists in the DWG and DXF file reading procedure, allowing an attacker to execute arbitrary code while opening a specially crafted file...

7.8CVSS8AI score0.00354EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2023/07/12 12:00 a.m.•19 views

SolidWorks 资源管理错误漏洞

SolidWorks is a 3D CAD software from SolidWorks that runs on the Microsoft Windows platform. A security vulnerability exists in SolidWorks versions 2021 through 2023, which stems from a post-release reuse, out-of-bounds write, and heap-based buffer overflow vulnerability during file reads that...

7.8CVSS8.1AI score0.00354EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/07/12 12:00 a.m.•31 views

Dassault Systèmes SolidWorks DXF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00354EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/07/12 12:00 a.m.•31 views

Dassault Systèmes SolidWorks DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.9AI score0.00354EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/07/12 12:00 a.m.•26 views

Dassault Systèmes SolidWorks DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•2 views

CVE-2023-2762: Use After Free

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...

7.8CVSS7.8AI score0.0036EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2023/07/12 12:00 a.m.•28 views

Dassault Systèmes SolidWorks DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes SolidWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00354EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/11 9:15 p.m.•15 views

CVE-2022-39806

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing .slddrw, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

7.8CVSS5.9AI score0.00561EPSS
SaveExploits0References2
Rows per page
Query Builder