Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p9gw-j9jr-fgjm

Опубликовано: 12 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Дефекты

CWE-122
CWE-416

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Дефекты

CWE-122
CWE-416