ZDI-CAN-25038: ZDI-24-1528: Dassault Systèmes eDrawings Viewer SAT File Parsing Uninitialized Variable Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-10204.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25038?
The severity of ZDI-CAN-25038 is considered high due to the potential for remote code execution.
How do I fix ZDI-CAN-25038?
To fix ZDI-CAN-25038, update your Dassault Systèmes eDrawings Viewer to the latest version that includes the security patch.
Who is affected by ZDI-CAN-25038?
ZDI-CAN-25038 affects installations of Dassault Systèmes eDrawings Viewer that have not applied the necessary updates.
What type of attack is ZDI-CAN-25038 associated with?
ZDI-CAN-25038 is associated with a remote code execution attack that requires user interaction.
What do attackers need to exploit ZDI-CAN-25038?
Attackers need the target to visit a malicious page or open a malicious file to exploit ZDI-CAN-25038.