CVE-2023-2763: Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.
Affected Software
Event History
Frequently Asked Questions
What are the vulnerabilities in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023?
The vulnerabilities in SOLIDWORKS Desktop include Use-After-Free, Out-of-bounds Write, and Heap-based Buffer Overflow.
How can these vulnerabilities be exploited?
These vulnerabilities can be exploited by an attacker to execute arbitrary code while opening DWG and DXF files.
What is the severity of CVE-2023-2763?
CVE-2023-2763 has a severity rating of high (7).
What is the Common Weakness Enumeration (CWE) associated with these vulnerabilities?
The Common Weakness Enumeration (CWE) numbers associated with these vulnerabilities are 119, 416, and 787.
Where can I find more information about these vulnerabilities?
You can find more information about these vulnerabilities on the 3DS website at [https://www.3ds.com/vulnerability/advisories](https://www.3ds.com/vulnerability/advisories).