The vulnerability of the ASMKERN229A.dll library, a software for simulation, design, and drawing in AutoCAD, allows a perpetrator to execute arbitrary code.

🗓️ 18 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

ASMKERN229A.dll in AutoCAD has a use-after-free flaw enabling arbitrary code execution via a crafted SLDPRT file.

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0009)	7 Jun 202400:00	–	nessus
Circl	CVE-2024-37004	26 Aug 202518:16	–	circl
CNNVD	Autodesk AutoCAD 资源管理错误漏洞	25 Jun 202400:00	–	cnnvd
CNVD	Autodesk AutoCAD Memory Misreference Vulnerability	28 Jun 202400:00	–	cnvd
CVE	CVE-2024-37004	25 Jun 202403:13	–	cve
Cvelist	CVE-2024-37004 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software	25 Jun 202403:13	–	cvelist
EUVD	EUVD-2024-36611	3 Oct 202520:07	–	euvd
NVD	CVE-2024-37004	25 Jun 202404:15	–	nvd
OSV	CVE-2024-37004	25 Jun 202404:15	–	osv
Positive Technologies	PT-2024-8192	8 Mar 202400:00	–	ptsecurity

Vulners

Node

autodesk autodesk_advance_steelMatch2022

autodesk autocadMatch2022

autodesk autocad_architectureMatch2022

autodesk autocad_electricalMatch2022

autodesk autocad_map_3dMatch2022

autodesk autocad_mechanicalMatch2022

autodesk autocad_mepMatch2022

autodesk autocad_plant_3dMatch2022

autodesk autodesk_civil_3dMatch2022

autodesk autocadMatch2023

autodesk autocadMatch2024

autodesk autocad_architectureMatch2023

autodesk autocad_architectureMatch2024

autodesk autocad_electricalMatch2023

autodesk autocad_electricalMatch2024

autodesk autocad_map_3dMatch2023

autodesk autocad_map_3dMatch2024

autodesk autocad_mechanicalMatch2023

autodesk autocad_mechanicalMatch2024

autodesk autocad_mepMatch2023

autodesk autocad_mepMatch2024

autodesk autocad_plant_3dMatch2023

autodesk autocad_plant_3dMatch2024

autodesk autodesk_civil_3dMatch2023

autodesk autodesk_civil_3dMatch2024

autodesk autodesk_advance_steelMatch2023

autodesk autodesk_advance_steelMatch2024

autodesk autocadMatch2025

autodesk autocad_architectureMatch2025

autodesk autocad_electricalMatch2025

autodesk autocad_mechanicalMatch2025

autodesk autocad_mepMatch2025

autodesk autocad_plant_3dMatch2025

autodesk autodesk_civil_3dMatch2025

autodesk autodesk_advance_steelMatch2025

autodesk autocad_map_3dMatch2025

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-756/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024061702
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-756/

18 Nov 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38.8

CVSS 210

EPSS0.00405