Lucene search
PRIOn knowledge basePRION:CVE-2021-27492HistoryMay 27, 2021 - 4:15 p.m.
Code injection
2021-05-2716:15:00
PRIOn knowledge base
www.prio-n.com
1
When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external DTD.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crosscadware | le | 2021.1 | |
| keyshot | le | 10.1 |
Related
nvd
nvd
CVE-2021-27492
2021-05-27 16:15:08
cve
cve
CVE-2021-27492
2021-05-27 16:15:08
cvelist
cvelist
CVE-2021-27492
2021-05-27 15:41:49
zdi
zdi
ics
ics
Datakit Libraries bundled in Luxion KeyShot
2021-05-25 12:00:00