Siemens Solid Edge Viewer DWG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Siemens Solid Edge Viewer DWG file parsing heap-based buffer overflow remote code execution vulnerability. Remote attackers can execute arbitrary code on affected installations. User interaction is required to exploit this vulnerability by visiting a malicious page or opening a malicious file. The flaw exists within the parsing of DWG files due to the lack of proper validation of user-supplied data length before copying it to a fixed-length heap-based buffer. Attackers can leverage this to execute code in the context of the current process.