ZDI-CAN-27283: ZDI-25-904: Dassault Systèmes eDrawings Viewer PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9447.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-27283?
The severity of ZDI-CAN-27283 is critical, as it allows remote code execution on affected systems.
How do I fix ZDI-CAN-27283?
To fix ZDI-CAN-27283, update your Dassault Systèmes eDrawings Viewer to the latest version provided by the vendor.
What systems are affected by ZDI-CAN-27283?
ZDI-CAN-27283 affects all installations of Dassault Systèmes eDrawings Viewer.
What type of attacks can ZDI-CAN-27283 be used for?
ZDI-CAN-27283 can be exploited by attackers to execute arbitrary code remotely on a vulnerable system.
Is user interaction required to exploit ZDI-CAN-27283?
Yes, user interaction is required, as the target must visit a malicious page or open a malicious file to trigger the vulnerability.