Headline
CVE-2022-43397
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-17854)
%PDF-1.5 %���� 71 0 obj << /Length 2395 /Filter /FlateDecode >> stream x��Z[s�6~���#5��q%�Lwg\�ɤmג��I;;�DۚH���������2I�=�?�"A��\�s@�8xw�����-��F:�Q0� $F*��5D�y�9�,�U��Gc*U8If�l4&"\�����E�� á�sDw�Y:�Ί����=�1���|z��#�<0 �d$���>���9<�)��i��7W ��zL�~=�^��Fӈ’E���]4GZ�I�$�\ʪ��F$R^A���3�f_ ""�����vkW)�}��C�r0��D���],��L}�� �ƹ�HQ�Kx�0���s��d���Fq6���}!(S��"�Q��4��R]Rb\6�z�p�\’Y��b�(I�/ c�|�=7��� EJ�.I1Ѻ$�u����A��T�{Y1��d\HD�nu�8O������’ �SA�2��3��l-�-��X�kzgq��xT��S:&d��Y� DY��煛s���YB��,�f�n�,Y���#��$�au�͉"�5�V����M��qW?�y�q{�f��¸��.�� � �`5��g�(]��(3���^}�pr98��Y�����9#�В��ӕ�’’��ΦcJe���o|s3b$LfE��R\���_����v=�S�$�ߗ90q�_m���vlw��5K��r-?��Tno�����.Y�S�k�f�s(cF0’m����2’�aЬ���w��Ҳ���M;���N��͈��$n��U\ pQ)��7�i�fm�$sO��zf4������’��M7ɺFd��t[c�]�/�;?��o�g�q� ���a�u��AXC!D�����(b�,�F)v��K���:�"�F�M�Ǔ�������M�մ�&e�*-�r������e�j�%�yd�;c �ᵿ ��z�S��|���pE���M�Β�j9 ��U{}=Tl�b{�@�e�0w�[�O�KVt�q��E#�`d�?O0^��,��+Xq��Y���p/�c;�K�|�z��{�G�J�’:� AY���#�N=?����TQT#,�,�,p�RE1 ����X �Ż!ٴ��ť �OgW��I��!��I�#�"{�� ��)�$���c��)�Rwߔ2�M����.� 1.d��ɧ_���?}l�W�4��dse���>�2����h A$u����-��n�l�2�n���em�F�uu3N��:��p�7�}^����UZ�%(��{��;�[P���܀�![: l��L(�w)-Q�Գ�j%j4T!sp5^��%��|��&� pR ����w;U�\w p]%%Ʋ[�oSvVb��U�;����冁�f�i|�q��g������-;�P]��O�K_�W3���BQAk{�V’=��;��~U�e��@U��-��d�lO$ϻa�(�^�4�’wE��������(7ѽ�0���)&�Cq\SI�J.��R�FD�*’�R���Ӿ3���]A�+N��M����ФC�ݦ3��N��[�7�~�*�/qV�+�0���~�G�\�Ӎ�d���A�:�� T��’�*� ��@��?[#�����{����8��s-uU?��^���g���=�����QU�]h�_5�����4��r�up4x���#F�v��@��d�����U} �3�m�(!y��5�T��+Tn!�* E�=O�>��{AƄ9�Q�u( ��د��TA&�� �jڮDD#~_