PT-2023-6597 · Mentor Graphics · Xpedition Layout Browser

Publicado 2023-10-10 · Atualizado 2023-10-16 · CVE-2023-30900

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xpedition Layout Browser versions prior to VX.2.14

Description A stack overflow vulnerability has been identified in the affected application when parsing a PCB file. This issue can be leveraged by an attacker to execute code in the context of the current process.

Recommendations For versions prior to VX.2.14, update to version VX.2.14 or later to resolve the issue. As a temporary workaround, consider restricting the parsing of PCB files from untrusted sources until a patch is applied.

Correção

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

BDU:2023-07363

CVE-2023-30900

Produtos afetados

Xpedition Layout Browser

Referências · 5

• https://bdu.fstec.ru/vul/2023-07363 · Nota de Segurança
• https://cert-portal.siemens.com/productcert/pdf/ssa-829656.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-30900 · Aviso do Fabricante
• https://t.me/cibsecurity/71913 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30900 · Nota de Segurança