漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V34.1 (All versions >= V34.1.242 < V34.1.244), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.0 (All versions >= V35.0.170 < V35.0.184), Simcenter Femap (All versions < V2023.1). The affected application contains an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17745)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Siemens Parasolid 缓冲区错误漏洞
Vulnerability Description
Siemens Parasolid是德国西门子(Siemens)公司的一个几何建模内核。 Siemens Parasolid V34.0.252之前版本、Parasolid V34.1.244之前版本和Parasolid V35.0.184之前版本存在缓冲区错误漏洞,该漏洞源于在解析特制X_T文件时包含超出分配结构末尾的越界读取,这可能允许攻击者在当前进程的上下文中执行代码。
CVSS Information
N/A
Vulnerability Type
N/A