Approved changes feed: RSS · Atom

cpe:2.3:a:ansys:spaceclaim:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAnsys (19bb12bc-494d-5b31-9a8b-f3061fe66812)
ProductSpaceclaim (fb52c799-27db-533c-b446-65de6f986329)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-42131 vulnerable 2026-06-08 06:11:07.881521 Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-17827.
Published: 2024-05-03T02:13:35.701Z
Updated: 2024-09-18T18:30:16.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40654 vulnerable 2026-06-08 05:48:27.854885 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_T files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18351.
Published: 2022-09-15T15:26:30.000Z
Updated: 2024-08-03T12:21:46.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40653 vulnerable 2026-06-08 05:48:27.854608 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18349.
Published: 2022-09-15T15:26:29.000Z
Updated: 2024-08-03T12:21:46.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40652 vulnerable 2026-06-08 05:48:27.854342 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17846.
Published: 2022-09-15T15:26:28.000Z
Updated: 2024-08-03T12:21:46.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40651 vulnerable 2026-06-08 05:48:27.853978 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17844.
Published: 2022-09-15T15:26:27.000Z
Updated: 2024-08-03T12:21:46.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40650 vulnerable 2026-06-08 05:48:27.853585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40649 vulnerable 2026-06-08 05:48:27.853187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40648 vulnerable 2026-06-08 05:48:27.852902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40647 vulnerable 2026-06-08 05:48:27.852632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40646 vulnerable 2026-06-08 05:48:27.852357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40645 vulnerable 2026-06-08 05:48:27.852064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40644 vulnerable 2026-06-08 05:48:27.851579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40643 vulnerable 2026-06-08 05:48:27.851304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40642 vulnerable 2026-06-08 05:48:27.850890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40641 vulnerable 2026-06-08 05:48:27.850603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40640 vulnerable 2026-06-08 05:48:27.850303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40639 vulnerable 2026-06-08 05:48:27.849997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40638 vulnerable 2026-06-08 05:48:27.849586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40637 vulnerable 2026-06-08 05:48:27.849046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40636 vulnerable 2026-06-08 05:48:27.847850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.