ZDI-CAN-25011: ZDI-24-1529: Dassault Systèmes eDrawings Viewer X_B File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-10204.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25011?
The severity of ZDI-CAN-25011 is high due to its potential for remote code execution.
How do I fix ZDI-CAN-25011?
To fix ZDI-CAN-25011, ensure you update to the latest version of Dassault Systèmes eDrawings Viewer as recommended by the vendor.
Who is affected by ZDI-CAN-25011?
ZDI-CAN-25011 affects installations of Dassault Systèmes eDrawings Viewer that have not been patched.
What type of attacks can ZDI-CAN-25011 facilitate?
ZDI-CAN-25011 can facilitate remote code execution if the target user interacts with a malicious file or website.
What must a user do to trigger ZDI-CAN-25011?
A user must visit a malicious page or open a malicious file to trigger the vulnerability ZDI-CAN-25011.