2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SOLIDWORKS eDrawings","vendor":"Dassault Systèmes","versions":[{"lessThanOrEqual":"Release SOLIDWORKS Desktop 2025 SP5","status":"affected","version":"Release SOLIDWORKS Desktop 2025 SP0","versionType":"custom"},{"status":"affected","version":"Release SOLIDWORKS Desktop 2026 SP0"}]}],"source":"3DS.Information-Security@3ds.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*","matchCriteriaId":"3BFD2148-C6C4-4CF2-9F55-B2CA6718764E","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*","matchCriteriaId":"D287DF59-F58D-4E20-94CE-AC215210869E","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*","matchCriteriaId":"7AEE42D4-395E-4123-A6C3-6FB629E04DE6","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*","matchCriteriaId":"A83323FC-7F94-474C-A88D-9D7EBD2245CB","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*","matchCriteriaId":"78B93E6F-8D54-48E7-9316-BCCCE84CC4BD","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*","matchCriteriaId":"41D92A14-FC5A-458D-9905-96ED8B1AF37F","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*","matchCriteriaId":"D757A6BA-3930-429F-9A74-9CEA0A38BFDC","vulnerable":true},{"criteria":"cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*","matchCriteriaId":"593E69C3-57C6-498E-ABB8-4DA5C511E500","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."},{"lang":"es","value":"Una vulnerabilidad de lectura fuera de límites que afecta el procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versión SOLIDWORKS Desktop 2025 hasta la versión SOLIDWORKS Desktop 2026 podría permitir a un atacante ejecutar código arbitrario al abrir un archivo EPRT especialmente diseñado."}],"id":"CVE-2026-1334","lastModified":"2026-06-17T10:15:37.313","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"3DS.Information-Security@3ds.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1334","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-02-18T04:56:23.134147Z","version":"2.0.3"}}]},"published":"2026-02-16T14:16:18.160","references":[{"source":"3DS.Information-Security@3ds.com","tags":["Vendor Advisory"],"url":"https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1334"}],"sourceIdentifier":"3DS.Information-Security@3ds.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"3DS.Information-Security@3ds.com","type":"Secondary"}]}
|