71 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-8374
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader /plugins/ThreeMFReader.py. The vulnerabilit...
PDF Document Buffer Overflow Information Disclosure
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...
PDF-XChange Editor Buffer Overflow Information Disclosure
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing U3D format files. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the...
PDF Document Buffer Overflow
The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PDF Document Buffer Overflow Information Disclosure
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...
Autodesk AutoCAD resource management error vulnerability
Autodesk AutoCAD is a suite of specialized 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD that originates from parsing a malicious specially crafted 3DM file that could lead to post-release reuse, which could result in a crash, read sensitive data, or...
ASMkern229A.dll ASMBASE229A.dll AutoCAD Code Execution
The vulnerability of the ASMkern229A.dll and ASMBASE229A.dll libraries, which are software components for modeling, design, and drafting in AutoCAD, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to cause the application to terminat...
PT-2025-4096 · Unknown · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. It requires user interaction, where the target must visit a...
Autodesk AutoCAD security vulnerabilities
Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD that stems from a heap-based buffer overflow vulnerability that can be triggered when parsing a maliciously crafted 3DM file in AcTranslators.exe, which can be...
PDF-XChange Editor Heap Buffer Overflow
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Autodesk AutoCAD Security Vulnerability
Autodesk AutoCAD is a suite of professional 3D drawing software from the US company Autodesk. A security vulnerability exists in Autodesk AutoCAD version 2024.1.5, which originates when the Autodesk application parses maliciously crafted 3DM files in opennurbs.dll and ASMkern229A.dll, and can cau...
PT-2024-6418 · Unknown · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to an out-of-bounds read in the memory buffer when parsing U3D files in PDF-XChange Editor. This can allow an attacker to disclose sensitive information by...
Siemens Solid Edge Use-After-Free
The vulnerability of Siemens Solid Edge’s design and modeling tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow attackers to disclose sensitive information using specially created STL files...
CVE-2022-28309
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2022-28312
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...
CVE-2022-28308
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Adobe Dimension Buffer Overflow DoS
The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory when processing GLTF files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Adobe Dimension Use-After-Free
The vulnerability of Adobe Dimension’s 3D design software relates to the use of memory after it is freed during the processing of USDZ files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created USDZ file...
CVE-2022-42383
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-41147
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...