ZDI-26-096: Dassault Systèmes eDrawings Viewer EPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1283.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-096?
ZDI-26-096 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix ZDI-26-096?
To fix ZDI-26-096, update to the latest version of Dassault Systèmes eDrawings Viewer that addresses this buffer overflow issue.
What type of vulnerability is ZDI-26-096?
ZDI-26-096 is a heap-based buffer overflow vulnerability that can lead to remote code execution.
What is affected by ZDI-26-096?
ZDI-26-096 affects installations of Dassault Systèmes eDrawings Viewer.
What is required to exploit ZDI-26-096?
Exploitation of ZDI-26-096 requires user interaction, such as opening a malicious EPRT file.