ZDI-26-113: Dassault Systèmes eDrawings Viewer EPRT File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1334.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-113?
The severity of ZDI-26-113 is critical due to its potential for remote code execution.
How do I fix ZDI-26-113?
To fix ZDI-26-113, update to the latest version of Dassault Systèmes eDrawings Viewer as per the vendor's recommendations.
What potential impact does ZDI-26-113 have on my system?
ZDI-26-113 allows attackers to execute arbitrary code which can compromise the entire system's security.
Is user interaction required to exploit ZDI-26-113?
Yes, user interaction is required to exploit ZDI-26-113, specifically by opening a malicious EPRT file.
Which software versions are affected by ZDI-26-113?
ZDI-26-113 affects all impacted installations of Dassault Systèmes eDrawings Viewer.