Lucene search

AutodeskCVE-2022-42946

HistoryDec 19, 2022 - 4:15 p.m.

CVE-2022-42946

2022-12-1916:15:11

CWE-125

autodesk

web.nvd.nist.gov

autodesk maya

cve-2022-42946

buffer overflow

code execution

nvd

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

26.7%

JSON

Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected configurations

Nvd

Node

autodeskmayaMatch2023

VendorProductVersionCPE
autodeskmaya2023cpe:2.3:a:autodesk:maya:2023:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autodesk	maya	2023	cpe:2.3:a:autodesk:maya:2023:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Autodesk Maya",
    "versions": [
      {
        "version": "2023, 2022",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

26.7%

JSON

Related for CVE-2022-42946