PT-2022-2577
CVE-2021-46699
·
تاريخ النشر
2022-02-08
·
تاريخ التحديث
2022-03-24
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Simcenter Femap versions prior to V2022.1.1
Description
A stack-based buffer overflow vulnerability has been identified in Simcenter Femap while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability can be exploited by a remote attacker, allowing them to execute arbitrary code when analyzing specially crafted files.
Recommendations
For versions prior to V2022.1.1, update to version V2022.1.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of BDF file parsing functionality until a patch is available. Avoid using specially crafted BDF files in the affected application until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾