CVE-2024-1847
Assigner: 3DS
Published: 2024-02-28T17:34:00.666Z
State: PUBLISHED
title: Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024
problemTypes: descriptions: cweId: CWE-416
description: CWE-416 Use After Free
type: CWE
descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
descriptions: cweId: CWE-125
description: CWE-125 Out-of-bounds Read
type: CWE
descriptions: cweId: CWE-843
description: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
type: CWE
descriptions: cweId: CWE-908
description: CWE-908 Use of Uninitialized Resource
type: CWE
affected: vendor: Dassault Systèmes
product: eDrawings
versions: status: affected
version: Release SOLIDWORKS 2023 SP0
lessThanOrEqual: Release SOLIDWORKS 2023 SP5
versionType: custom
status: affected
version: Release SOLIDWORKS 2024 SP0
lessThanOrEqual: Release SOLIDWORKS 2024 SP1
versionType: custom
defaultStatus: unaffected
descriptions: value: Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, IPT, JT, SAT, STL, STP, X_B or X_T file. NOTE: CVE-2024-3298 and CVE-2024-3299 were SPLIT from this ID.
supportingMedia: type: text/html
base64: no
value: Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, IPT, JT, SAT, STL, STP, X_B or X_T file. NOTE: CVE-2024-3298 and CVE-2024-3299 were SPLIT from this ID.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
source: discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev
credits: value: Mat Powell of Trend Micro Zero Day Initiative
user: 00000000-0000-4000-9000-000000000000
type: finder
value: Francis Provencher {PRL}
user: 00000000-0000-4000-9000-000000000000
type: finder
value: rgod
user: 00000000-0000-4000-9000-000000000000
type: finder