CVE-2023-23579: Datakit CrossCAD/Ware

Q: What is CVE-2023-23579?

CVE-2023-23579 is a vulnerability found in Datakit CrossCadWare_x64.dll that allows an attacker to execute code in the context of the current process.

Q: How severe is CVE-2023-23579?

CVE-2023-23579 has a severity rating of 7.8, which is considered high.

Q: What software is affected by CVE-2023-23579?

Datakit CrossCadWare versions up to and excluding 2023.1 are affected by CVE-2023-23579.

Q: How can an attacker exploit CVE-2023-23579?

An attacker can exploit CVE-2023-23579 by crafting a specially crafted SLDPRT file that triggers an out-of-bounds write past the end of an allocated buffer in Datakit CrossCadWare_x64.dll.

Q: Is there a fix for CVE-2023-23579?

To fix CVE-2023-23579, it is recommended to update to a version of Datakit CrossCadWare that is higher than 2023.1.

Published Apr 20, 2023

Updated

Datakit CrossCadWarex64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process.

Affected Software

2 affected componentsFixes available

Datakit CrossCAD/Ware_x64 library<2023.1

2023.1

Datakit CrossCadWare<2023.1

Remediation

Information

Datakit recommends user upgrade to v2023.1 https://www.datakit.com/en/crosscad_ware.php or later.

Event History

Apr 20, 2023

CVE Published

via MITRE·06:16 PM

Data Sourced

via MITRE·06:16 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-103-14

Frequently Asked Questions

What is CVE-2023-23579?

CVE-2023-23579 is a vulnerability found in Datakit CrossCadWare_x64.dll that allows an attacker to execute code in the context of the current process.

How severe is CVE-2023-23579?

CVE-2023-23579 has a severity rating of 7.8, which is considered high.

What software is affected by CVE-2023-23579?