Skip to content
OpenAdvisories
High ICSA-23-103-14 5 CVEs

Datakit CrossCAD-WARE

Published Apr 20, 2023 · Updated Apr 20, 2023

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information or execute arbitrary code.

Vulnerabilities 5

  • High 7.8

    Datakit CrossCAD/Ware

    Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process.

  • Low 3.3

    CVE-2023-22295

    Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  • Low 3.3

    Datakit CrossCAD/Ware

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  • Low 3.3

    Datakit CrossCAD/Ware

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

  • Low 3.3

    Datakit CrossCAD/Ware

    Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

Revision history

  1. #1

    CSAF Creation Date

References