257 matches found
PT-2023-26283 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a maliciou...
The vulnerability of the 3D viewing tool JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, allows a perpetrator to trigger a service failure.
The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure during the analysis of a specially created CGM file...
CVE-2023-32382
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory...
PT-2023-17398 · Dassault Systèmes · 3Dexperience
Name of the Vulnerable Software and Affected Versions: 3DEXPERIENCE versions R2018x through R2023x Description: A reflected Cross-site Scripting XSS issue allows an attacker to execute arbitrary script code. Recommendations: For versions R2018x through R2023x, update to a version that includes a...
PT-2023-5133 · Microsoft · 3D Builder
Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to a buffer overflow in memory when processing PLY format files, potentially allowing an attacker to execute arbitrary code by loading a specially crafted file or...
SUSE CVE-2023-25661
TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. A proof of concept can be constructed with the Convolution3DTranspose function. This...
CVE-2023-25878
Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...
CVE-2023-25871
Adobe Substance 3D Stager versions 2.0.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2023-1831 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...
PT-2023-1828 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is related to an out-of-bounds read operation in memory. Exploitation of this issue could allow an attacker to disclose sensitive information by using a specially...
SUSE CVE-2010-3817
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets CSS 3D transforms, which allows remote attackers to execute arbitrary code or...
CVE-2023-23390
3D Builder Remote Code Execution Vulnerability...
CVE-2023-23378
Print 3D Remote Code Execution Vulnerability...
The vulnerability of the 3D Builder software in designing and preparing objects for 3D printing arises from insufficient validation of input data. This allows a malicious actor to execute arbitrary code within the target system.
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing exists due to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the target system by having the user open a specially created file...
CVE-2022-42402
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
PDF-XChange Editor 缓冲区错误漏洞
Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that stems from a problem with the parsing of certain U3D files...
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.
The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file...
