Lucene search

K
cve[email protected]CVE-2023-25007
HistoryMay 12, 2023 - 9:15 p.m.

CVE-2023-25007

2023-05-1221:15:09
CWE-824
web.nvd.nist.gov
16
cve-2023-25007
malicious actor
usd file
uninitialized pointer
code execution
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.2%

A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution.

Affected configurations

NVD
Node
autodesk3ds_max_usdRange0.3

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Autodesk 3ds Max USD Plugin",
    "versions": [
      {
        "version": "0.3",
        "status": "affected"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

25.2%

Related for CVE-2023-25007