Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2014-2073: CATIA V5-6R2013 can be hijacked via network packet
CVE-2014-2073 · published 8 years ago
Summary
The 2013 version of Dassault Systèmes' CATIA design software can be tricked into running unwanted code when it receives a specially crafted data packet. This could let an attacker take control of the affected computer or cause it to crash. Apply the vendor's security update or disable any unnecessary network access to the CATIA service until the patch is installed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| 3ds | catia |
v5-6r2013 cpe:2.3:a:3ds:catia:v5-6r2013:*:*:*:*:*:*:* |
Original advisory text
Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus."
Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus."
References
- http://packetstormsecurity.com/files/125325/Catia-V5-6R2013-Stack-Buffer-Overflo... Exploit Third Party Advisory VDB Entry
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-787Out-of-bounds Write
Timeline
Published10 Apr 2018
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2014-2073 · NVD
Track software like this
Free during beta