A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions < V36.0.156), Simcenter Femap V2301 (All versions < V2301.0003), Simcenter Femap V2306 (All versions < V2306.0001). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21266)
2023-09-12T10:15:29.783
2024-11-21T08:20:25.450
Modified
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | siemens | parasolid | < 35.0.260 | Yes |
| Application | siemens | parasolid | < 35.1.246 | Yes |
| Application | siemens | parasolid | < 36.0.156 | Yes |
| Application | siemens | simcenter_femap | < 2301.0003 | Yes |
| Application | siemens | simcenter_femap | < 2306.0001 | Yes |