Description
A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0.210), Parasolid V36.1 (All versions < V36.1.185). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T part file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-23468)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Parasolid V35.1 | < V35.1.256 | V35.1.256 |
| Siemens | Parasolid V36.0 | < V36.0.210 | V36.0.210 |
| Siemens | Parasolid V36.1 | < V36.1.185 | V36.1.185 |
Advisories 1
- SSA-489698 SSA-489698: X_T File Parsing Vulnerability in Parasolid Siemens ProductCERT · May 14, 2024