ZDI-CAN-22843: ZDI-24-253: Dassault Systèmes eDrawings SLDDRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-3299.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22843?
The severity of ZDI-CAN-22843 is classified as critical due to the potential for remote code execution.
How do I fix ZDI-CAN-22843?
To fix ZDI-CAN-22843, update your Dassault Systèmes eDrawings to the latest version provided by the vendor.
What are the impacts of ZDI-CAN-22843?
The impact of ZDI-CAN-22843 includes the ability for remote attackers to execute arbitrary code on affected systems.
Is user interaction required to exploit ZDI-CAN-22843?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file to exploit ZDI-CAN-22843.
Which software is affected by ZDI-CAN-22843?
ZDI-CAN-22843 affects installations of Dassault Systèmes eDrawings.