Vulnerabilities > CVE-2023-2762 - Use After Free vulnerability in 3DS 3Dexperience Solidworks

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
3ds
CWE-416

Summary

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

Vulnerable Configurations

Part Description Count
Application
3Ds
1

Common Weakness Enumeration (CWE)