Lucene search
+L

131 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/10/31 12:0 a.m.12 views

Autodesk AutoCAD 3DM File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS6.8AI score0.00218EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/31 12:0 a.m.15 views

Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS6.8AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/10/31 12:0 a.m.13 views

Autodesk AutoCAD ACTranslators 3DM File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS6.8AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 10:15 p.m.23 views

CVE-2024-9826

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 10:15 p.m.28 views

CVE-2024-8590

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/29 10:15 p.m.28 views

CVE-2024-8591

A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:14 p.m.12 views

CVE-2024-9826 Autodesk AutoCAD ACTranslators 3DM File Parsing Use-After-Free Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 9:14 p.m.68 views

CVE-2024-9826

CVE-2024-9826 affects Autodesk AutoCAD via a Use-After-Free in atf_api.dll when parsing a malicious 3DM file. Affected software: AutoCAD; vulnerable component/file: atf_api.dll; root cause: Use-After-Free vulnerability triggered by malformed 3DM input. Potential impacts per documents: crash, abil...

7.8CVSS7.8AI score0.00218EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2024/10/29 9:14 p.m.31 views

CVE-2024-9826 Autodesk AutoCAD ACTranslators 3DM File Parsing Use-After-Free Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 9:8 p.m.66 views

CVE-2024-8591

CVE-2024-8591 affects Autodesk AutoCAD via parsing of 3DM files in AcTranslators.exe, causing a heap-based buffer overflow. The issue can crash the process, read/write memory, or allow arbitrary code execution in the current process context. Public disclosures (ZDI) describe remote code execution...

7.8CVSS7.9AI score0.00221EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2024/10/29 9:8 p.m.33 views

CVE-2024-8591 Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:8 p.m.13 views

CVE-2024-8591 Autodesk AutoCAD 3DM File Parsing Heap-based Buffer Overflow Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.5AI score0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:7 p.m.17 views

CVE-2024-8590 Autodesk AutoCAD 3DM File Parsing Use-After-Free Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 9:7 p.m.32 views

CVE-2024-8590 Autodesk AutoCAD 3DM File Parsing Use-After-Free Code Execution Vulnerability

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 9:7 p.m.80 views

CVE-2024-8590

CVE-2024-8590: A Use-After-Free in AutoCAD’s atf_api.dll when parsing a crafted 3DM file can cause a crash, expose/write data, or allow arbitrary code execution in the process. Affected software is Autodesk AutoCAD (parsing of 3DM via atf_api.dll). Documented impact includes local access, high se...

7.8CVSS7.8AI score0.00218EPSS
SaveExploits0References1Affected Software8
Positive Technologies
Positive Technologies
added 2024/08/22 12:0 a.m.12 views

PT-2024-7525 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM file can cause a Heap-Based Buffer Overflow when parsed in AcTranslators.exe through Autodesk AutoCAD. This issue can be leveraged by a malicious actor to...

7.8CVSS8.6AI score0.00221EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2024/07/25 12:0 a.m.14 views

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS7.8AI score0.00403EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/06/28 12:0 a.m.34 views

Autodesk AutoCAD Out-of-Bounds Write Vulnerability

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. An out-of-bounds write vulnerability exists in Autodesk AutoCAD version 2024.1.5, which stems from a lack of proper validation of user-supplied data when parsing maliciously crafted 3DM files in...

7.8CVSS7.2AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/25 4:15 a.m.47 views

CVE-2024-36999

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00395EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/25 4:15 a.m.28 views

CVE-2024-23152

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00403EPSS
SaveExploits0References1
Rows per page
Query Builder