287 matches found
CVE-2022-40649
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40649
CVE-2022-40649 affects Ansys SpaceClaim 2022 R1. The vulnerability stems from parsing X_B files where a pointer is not properly initialized, enabling a remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and is actionable in ...
CVE-2022-40648
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40647
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40646
CVE-2022-40646 affects Ansys SpaceClaim 2022 R1. The root cause is an uninitialized pointer during parsing of X_B files, allowing remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and can execute code in the context of the ...
CVE-2022-40646
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40645
CVE-2022-40645 affects Ansys SpaceClaim 2022 R1. Root cause: uninitialized pointer in the parsing of X_B files, leading to arbitrary code execution. Exploitation requires user interaction (target must visit a crafted page or open a malicious file). CVSS data in the initial documents indicates a H...
CVE-2022-40645
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40644
CVE-2022-40644 involves Ansys SpaceClaim 2022 R1 where the X_B file parser lacks proper validation, causing an out-of-bounds write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is tied to ZDI-CAN-17408...
CVE-2022-40644
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40643
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40643
CVE-2022-40643 affects Ansys SpaceClaim 2022 R1. The issue is an uninitialized pointer in the parsing of X_B files, enabling remote code execution with user interaction (target must visit a malicious page or open a malicious file). Referenced advisories (e.g., ZDI-22-1199) document this vector. N...
CVE-2022-40642
CVE-2022-40642 affects Ansys SpaceClaim 2022 R1. The vulnerability is in the parsing of X_B files and arises from a lack of proper initialization of a pointer before use, allowing remote code execution with user interaction required (target must open a malicious page or file). Documented by ZDI a...
CVE-2022-40642
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40641
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40640
CVE-2022-40640 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files, causing a read-before-start of an allocated data structure and enabling code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); advisories (e.g., ZDI-22-11...
CVE-2022-40640
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40638
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
CVE-2022-40638
CVE-2022-40638 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files where code can run without validating whether an object exists, enabling a remote code execution when a user opens a malicious file or visits a malicious page. The issue is a use-after-free-like condition that ca...
Ansys SpaceClaim 缓冲区错误漏洞
Ansys SpaceClaim is a solid modeling CAD software from Ansys Corporation. A buffer error vulnerability exists in Ansys SpaceClaim 2022 R1, which stems from a specific flaw in the parsing of XB files that lacks proper validation of user-supplied data, which could result in writes beyond the end of...