ZDI-24-1529: Dassault Systèmes eDrawings Viewer X_B File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-10204.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1529?
The severity of ZDI-24-1529 is categorized as high due to its potential for remote code execution.
How do I fix ZDI-24-1529?
To fix ZDI-24-1529, users should update to the latest version of Dassault Systèmes eDrawings Viewer as recommended by the vendor.
What platforms are affected by ZDI-24-1529?
ZDI-24-1529 affects installations of Dassault Systèmes eDrawings Viewer on all supported operating systems.
What is the exploit vector for ZDI-24-1529?
The exploit vector for ZDI-24-1529 requires user interaction, specifically visiting a malicious webpage or opening a malicious file.
Can ZDI-24-1529 be exploited remotely?
Yes, ZDI-24-1529 can be exploited remotely if the user interacts with a malicious source.