NetSight
IP …
high7.8

CVE-2023-41032

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions < …

Impact

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions < V35.1.184), Parasolid V36.0 (All versions < V36.0.142), Simcenter Femap V2301 (All versions < V2301.0003), Simcenter Femap V2306 (All versions < V2306.0001). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21263)

Affected products

VendorProductAffected versions
SiemensParasolid
from 34.1 before 34.1.258
from 35.0 before 35.0.253
from 35.1 before 35.1.184
from 36.0 before 36.0.142
SiemensSimcenter Femap
from 2301.0 before 2301.0003
from 2306.0 before 2306.0001

Weakness classification

CWE-787

References