ZDI-CAN-27332: ZDI-25-903: Dassault Systèmes eDrawings Viewer PAR File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9449.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-27332?
ZDI-CAN-27332 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix ZDI-CAN-27332?
To mitigate ZDI-CAN-27332, ensure you are using the latest version of Dassault Systèmes eDrawings Viewer and apply any available security patches.
Who is affected by ZDI-CAN-27332?
ZDI-CAN-27332 affects installations of Dassault Systèmes eDrawings Viewer.
What type of attack does ZDI-CAN-27332 involve?
ZDI-CAN-27332 involves a remote code execution attack that requires user interaction to be successfully exploited.
What must a user do to become vulnerable to ZDI-CAN-27332?
A user must visit a malicious webpage or open a malicious file to exploit the ZDI-CAN-27332 vulnerability.