425 matches found
Autodesk 多个产品DWG处理代码执行漏洞(CVE-2013-3665)
CVECAN ID: CVE-2013-3665 Autodesk是二维和三维设计、工程及娱乐软件厂商，旗下拥有拥有“AutoCAD”、“3DS Max”等知名软件。 多个Autodesk产品在处理DWG文件时存在安全漏洞，可被恶意用户利用执行任意代码，从而破坏用户系统。 0 Autodesk AutoCAD 2013 Autodesk AutoCAD 2012 Autodesk AutoCAD 2011 Autodesk AutoCAD Civil 3D 2013.x Autodesk AutoCAD Civil 3D 2012.x Autodesk AutoCAD Civil 3D...
Nintendo 3DS also got Hacked Within 24 Hours after Release !
The new Nintendo 3DS didn't last 24 hours in Japan before hackers jailbroke the device to support Revolution For DS R4 flash cards that play old Nintendo games. Although R4 cards were built for Nintendo DS, the hackers show how they can use the storage cards to run homebrew and older Nintendo gam...
Google SketchUp < 7.1 M2 Multiple Vulnerabilities - Windows
Google SketchUp is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google SketchUp 7.1.6087 Memory Corruption
!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...
Google SketchUp memory corruption
Memory corruption on 3DS files parsing...
[CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Google SketchUp 'lib3ds' 3DS Importer Memory Corruption 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id:...
Google SketchUp <= v7.1.6087 'lib3ds' 3DS Importer Memory Corruption
Exploit for unknown platform in category local exploits ==================================================================== Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption ==================================================================== !/usr/bin/python Google SketchUp =...
Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption
Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption !/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download:...
Google SketchUp 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption
!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...
Memory corruption
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...
CVE-2010-0280
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...
CVE-2010-0280
Vulnerability CVE-2010-0280 affects lib3ds (1.x) as used by Google SketchUp 7.x before 7.1 M2. Root cause: an array index error in lib3ds (mesh.c) can be triggered by crafted 3DS files, enabling remote memory corruption and potentially arbitrary code execution or DoS. Affected environments includ...
CVE-2010-0280
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c...
Autodesk 3DS Max code execution
It's possible to embed code into .max files...
Autodesk 3ds Max应用回调远程代码执行漏洞
BUGTRAQ ID: 36634 CVE ID: CVE-2009-3577 Autodesk 3D Max是在视频游戏、电影、多媒体和web内容开发中广泛应用的建模和动画软件包。 Autodesk 3D Max提供了内嵌的脚本语言MaxScript。3D Max允许用户将MaxScript绑定到应用回调上，如果用户受骗打开了嵌入有MaxScript应用回调的.max文件，就会导致执行任意代码。 Autodesk 3DS Max 9 Autodesk 3DS Max 8 Autodesk 3DS Max 7 Autodesk 3DS Max 6 Autodesk 3DS Max 201...
Autodesk 3DS Max Application Callbacks Arbitrary Command Execution
Autodesk 3DS Max Application Callbacks Arbitrary Command Execution. CVE-2009-3577. Local exploit for windows platform -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk 3DS Max Application Callbacks Arbitrary...
Autodesk 3DS Max Application Callbacks Arbitrary Command Execution
Advisory ID Internal CORE-2009-0909 Core Security - CoreLabs Autodesk 3DS Max Application Callbacks Arbitrary Command Execution 1. Advisory Information Title: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution Advisory Id: CORE-2009-0909 Advisory...
Autodesk 3DS Max Application Callbacks Arbitrary Command Execution
Exploit for unknown platform in category local exploits ================================================================== Autodesk 3DS Max Application Callbacks Arbitrary Command Execution ================================================================== Title: Autodesk 3DS Max Application...
Autodesk 3DS Max Application Callbacks Arbitrary Command Execution
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk 3DS Max Application Callbacks Arbitrary Command Execution 1. Advisory Information Title: Autodesk 3DS Max Application...
Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution
Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution source: https://www.securityfocus.com/bid/36634/info Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application. This issue affects the following: 3ds...