The vulnerability of the CC5Dll.dll library, a software for simulation, design, and drafting in AutoCAD, allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

🗓️ 18 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Buffer overflow in CC5Dll.dll enables unauthorized access and code execution via a CATPART file.

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)	28 Mar 202400:00	–	nessus
Circl	CVE-2024-23126	22 Feb 202404:26	–	circl
CNNVD	Autodesk AutoCAD Buffer Error Vulnerability	22 Feb 202400:00	–	cnnvd
CVE	CVE-2024-23126	22 Feb 202402:25	–	cve
Cvelist	CVE-2024-23126 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software	22 Feb 202402:25	–	cvelist
EUVD	EUVD-2024-20645	3 Oct 202520:07	–	euvd
NVD	CVE-2024-23126	22 Feb 202403:15	–	nvd
OSV	CVE-2024-23126	22 Feb 202403:15	–	osv
Prion	Stack overflow	22 Feb 202403:15	–	prion
Positive Technologies	PT-2023-9686	29 Jun 202300:00	–	ptsecurity

Vulners

Node

autodesk autodesk_advance_steelMatch2022

autodesk autodesk_advance_steelMatch2021

autodesk autocadMatch2022

autodesk autocadMatch2021

autodesk autocad_architectureMatch2022

autodesk autocad_architectureMatch2021

autodesk autocad_electricalMatch2022

autodesk autocad_electricalMatch2021

autodesk autocad_map_3dMatch2022

autodesk autocad_map_3dMatch2021

autodesk autocad_mechanicalMatch2022

autodesk autocad_mechanicalMatch2021

autodesk autocad_mepMatch2022

autodesk autocad_mepMatch2021

autodesk autocad_plant_3dMatch2022

autodesk autocad_plant_3dMatch2021

autodesk autodesk_civil_3dMatch2022

autodesk autodesk_civil_3dMatch2021

autodesk autocadMatch2023

autodesk autocadMatch2024

autodesk autocad_architectureMatch2023

autodesk autocad_architectureMatch2024

autodesk autocad_electricalMatch2023

autodesk autocad_electricalMatch2024

autodesk autocad_map_3dMatch2023

autodesk autocad_map_3dMatch2024

autodesk autocad_mechanicalMatch2023

autodesk autocad_mechanicalMatch2024

autodesk autocad_mepMatch2023

autodesk autocad_mepMatch2024

autodesk autocad_plant_3dMatch2023

autodesk autocad_plant_3dMatch2024

autodesk autodesk_civil_3dMatch2023

autodesk autodesk_civil_3dMatch2024

autodesk autodesk_advance_steelMatch2023

autodesk autodesk_advance_steelMatch2024

autodesk autocadMatch2025

autodesk autocad_architectureMatch2025

autodesk autocad_electricalMatch2025

autodesk autocad_mechanicalMatch2025

autodesk autocad_mepMatch2025

autodesk autocad_plant_3dMatch2025

autodesk autodesk_civil_3dMatch2025

autodesk autodesk_advance_steelMatch2025

autodesk autocad_map_3dMatch2025

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-147/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024061702
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-147/

18 Nov 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 37.5

CVSS 27.6

EPSS0.00418