JVN#43254599: AutoCAD may insecurely load dynamic libraries

AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact Arbitrary code may be executed with the privileges of the running application. Solution Upgrade t...

Autocad DWG-AC1021 Heap Corruption

AutoCAD is a software for computer-aided design CAD and technical drawing in 2D/3D, being one of the world leading CAD design tools. It is developed and sold by Autodesk, Inc. Title: AutoCAD DWG-AC1021 Heap Corruption CVE Name: CVE-2013-3665 Permalink:...

Autodesk 多个产品DWG处理代码执行漏洞(CVE-2013-3665)

CVECAN ID: CVE-2013-3665 Autodesk是二维和三维设计、工程及娱乐软件厂商，旗下拥有拥有“AutoCAD”、“3DS Max”等知名软件。 多个Autodesk产品在处理DWG文件时存在安全漏洞，可被恶意用户利用执行任意代码，从而破坏用户系统。 0 Autodesk AutoCAD 2013 Autodesk AutoCAD 2012 Autodesk AutoCAD 2011 Autodesk AutoCAD Civil 3D 2013.x Autodesk AutoCAD Civil 3D 2012.x Autodesk AutoCAD Civil 3D...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

Code injection

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

CVE-2013-3665

CVE-2013-3665 affects Autodesk AutoCAD (2011–2014), AutoCAD LT (2011–2014) and DWG TrueView (2011–2014). The root cause is a bounds-checking failure when processing DWG files, which could allow an attacker to trigger arbitrary code execution via a specially crafted DWG file. Impact is remote code...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

KLA10081 ACE vulnerability in Autodesk

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories Autodesk bulletin Related products AutoCAD...

PixSteal-A Trojan Steals Images, Uploads to Iraqi FTP Server

A new Trojan has been identified that has the capability of stealing images from infected computers, setting the stage for anything from identity theft to blackmail. PixSteal-A also pilfers .dmp, or Windows memory dump files that contain data on system crashes and sends all stolen data to a remot...

CVE-2010-5241

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is...

CVE-2010-5241

CVE-2010-5241 affects Autodesk AutoCAD 2010, where local users can gain privileges via untrusted search paths involving (1) dwmapi.dll or (2) IBFS32.DLL placed in the current working directory (demonstrated with a .dwg file). The connected records consistently cite the affected product and the tw...

CVE-2010-5241

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is...

AutoCAD Worm Stealing Designs, Blueprints

Security researchers have come across a new worm that is meant specifically to steal blueprints, design documents and other files created with the AutoCAD software. The worm, known as ACAD/Medre.A, is spreading through infected AutoCAD templates and is sending tens of thousands of stolen document...

A virus specialized for AutoCAD, a perfect cyber espionage tool

A virus specialized for AutoCAD, a perfect cyber espionage tool In recent years we are assisting to a profoundly change in the nature of malware, it is increased the development for spy purposes, for its spread in both private and government sectors. The recent case of Flame malware has...

Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)

No description provided by source. / Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll...

Autodesk AutoCAD 2007 DLL Hijacking Exploit

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...

Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)

Exploit for windows platform in category local exploits ======================================================= Autodesk AutoCAD 2007 dll Hijacking exploit color.dll ======================================================= / Description: A vulnerability exists in windows that allows other...

Autodesk AutoCAD 2007 - color.dll DLL Hijacking

Autodesk AutoCAD 2007 - color.dll DLL Hijacking / Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll...

Autodesk AutoCAD 2007 - 'color.dll' DLL Hijacking

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...