CVE-2023-2763: Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
First published: Wed Jul 12 2023(Updated: )
Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.
Credit: 3DS.Information-Security@3ds.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Solidworks Product Data Management | >=2021<=2023 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the vulnerabilities in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023?
The vulnerabilities in SOLIDWORKS Desktop include Use-After-Free, Out-of-bounds Write, and Heap-based Buffer Overflow.
How can these vulnerabilities be exploited?
These vulnerabilities can be exploited by an attacker to execute arbitrary code while opening DWG and DXF files.
What is the severity of CVE-2023-2763?
CVE-2023-2763 has a severity rating of high (7).
What is the Common Weakness Enumeration (CWE) associated with these vulnerabilities?
The Common Weakness Enumeration (CWE) numbers associated with these vulnerabilities are 119, 416, and 787.
Where can I find more information about these vulnerabilities?
You can find more information about these vulnerabilities on the 3DS website at [https://www.3ds.com/vulnerability/advisories](https://www.3ds.com/vulnerability/advisories).
- agent/type
- agent/references
- agent/severity
- agent/description
- agent/title
- agent/event
- agent/first-publish-date
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-latest
- vendor/3ds
- canonical/solidworks product data management
- version/solidworks product data management/2021
- version/solidworks product data management/2023