Approved changes feed: RSS · Atom

cpe:2.3:a:ansys:spaceclaim:2022:r1:*:*:*:*:*:*

part: a version: 2022 update: r1

VendorAnsys (19bb12bc-494d-5b31-9a8b-f3061fe66812)
ProductSpaceclaim (fb52c799-27db-533c-b446-65de6f986329)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-42131 vulnerable 2026-06-08 06:11:07.882398 Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-17827.
Published: 2024-05-03T02:13:35.701Z
Updated: 2024-09-18T18:30:16.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40654 vulnerable 2026-06-08 05:48:27.854914 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_T files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18351.
Published: 2022-09-15T15:26:30.000Z
Updated: 2024-08-03T12:21:46.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40653 vulnerable 2026-06-08 05:48:27.854638 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18349.
Published: 2022-09-15T15:26:29.000Z
Updated: 2024-08-03T12:21:46.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40652 vulnerable 2026-06-08 05:48:27.854367 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17846.
Published: 2022-09-15T15:26:28.000Z
Updated: 2024-08-03T12:21:46.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40651 vulnerable 2026-06-08 05:48:27.854092 Details available
HIGH (7.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17844.
Published: 2022-09-15T15:26:27.000Z
Updated: 2024-08-03T12:21:46.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40650 vulnerable 2026-06-08 05:48:27.853727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40649 vulnerable 2026-06-08 05:48:27.853216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40648 vulnerable 2026-06-08 05:48:27.852929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40647 vulnerable 2026-06-08 05:48:27.852658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40646 vulnerable 2026-06-08 05:48:27.852384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40645 vulnerable 2026-06-08 05:48:27.852095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40644 vulnerable 2026-06-08 05:48:27.851722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40643 vulnerable 2026-06-08 05:48:27.851332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40642 vulnerable 2026-06-08 05:48:27.851046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40641 vulnerable 2026-06-08 05:48:27.850633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40640 vulnerable 2026-06-08 05:48:27.850335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40639 vulnerable 2026-06-08 05:48:27.850028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40638 vulnerable 2026-06-08 05:48:27.849718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40637 vulnerable 2026-06-08 05:48:27.849199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40636 vulnerable 2026-06-08 05:48:27.848676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.