Vulnerabilities > 3DS
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-12-28 | CVE-2020-25507 | Incorrect Permission Assignment for Critical Resource vulnerability in 3DS Teamwork Cloud An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. | 7.2 |
| 2020-01-08 | CVE-2014-2072 | Out-of-bounds Write vulnerability in 3DS Catia V56R2013 Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks | 7.5 |
| 2018-04-10 | CVE-2014-2073 | Out-of-bounds Write vulnerability in 3DS Catia V56R2013 Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus." | 7.5 |
| 2013-06-27 | CVE-2013-4721 | SQL Injection vulnerability in 3DS Push2Rss 3DS SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2012-09-07 | CVE-2012-4883 | Unspecified vulnerability in 3DS 3Dvia Composer 6.8.1.1652 Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. local 3ds | 6.9 |
| 2012-09-07 | CVE-2012-4882 | Unspecified vulnerability in 3DS 3D XML Player 6.212.13.12076 Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file in the current working directory, as demonstrated by a directory that contains a .3dx file. local 3ds | 6.9 |
| 2009-03-04 | CVE-2009-0809 | Permissions, Privileges, and Access Controls vulnerability in multiple products The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object. | 3.5 |