Lucene search
+L

1423 matches found

Positive Technologies
Positive Technologies
added 2024/02/21 12:0 a.m.11 views

PT-2024-8205

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DWG and SLDPRT file can cause a Stack-based Overflow when parsed in opennurbs.dll and ODXSW DLL.dll through Autodesk applications. This can be used to cause a...

10CVSS7.3AI score0.00345EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/21 12:0 a.m.9 views

Autodesk AutoCAD Buffer Error Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from an out-of-bounds write vulnerability when parsing a maliciously compiled STP, CATPART or MODEL file in ASMKERN228A.dll. An attacker...

7.8CVSS7.8AI score0.00459EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/02/21 12:0 a.m.10 views

PT-2024-19683 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP file in ASMDATAX228A.dll, when parsed through Autodesk applications, can lead to a memory corruption issue due to a write access violation. This issue, in...

7.8CVSS7.6AI score0.00255EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/02/21 12:0 a.m.6 views

PT-2024-7762

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the opennurbs.dll library in Autodesk AutoCAD, which is vulnerable to an out-of-bounds read when parsing specially crafted 3DM files. This can allow an attack...

7.8CVSS7.2AI score0.00403EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.15 views

PT-2024-8046 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM, MODEL, and X B file can force an Out-of-Bound Read and/or Out-of-Bound Write when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk...

10CVSS7.6AI score0.00415EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.6 views

PT-2024-7766

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to a library called libodx.dll used in Autodesk AutoCAD for modeling, design, and drafting. It involves reading data beyond a specified buffer, which can be...

9.3CVSS7.2AI score0.00403EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.9 views

PT-2024-8050

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM file can cause a Heap-based Overflow when parsed in opennurbs.dll through Autodesk applications. This can be leveraged by a malicious actor to cause a...

10CVSS7.4AI score0.00401EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.9 views

PT-2024-8047 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free, potentially leading to code execution in the current process. Thi...

10CVSS7.9AI score0.00415EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.8 views

PT-2024-8049

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to the parsing of maliciously crafted MODEL files in the ASMkern229A.dll library through Autodesk applications. This can lead to the use of uninitialized...

7.8CVSS7.5AI score0.00386EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.9 views

PT-2024-8219

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted X B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This issue can...

10CVSS6.1AI score0.0042EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.10 views

PT-2024-7761

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the parsing of maliciously crafted STP files in the stp aim x64 vc15d.dll library through Autodesk applications. This can lead to the use of uninitialized...

10CVSS7.2AI score0.00316EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.5 views

PT-2024-8054

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is caused by a maliciously crafted CATPRODUCT file, which when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write...

10CVSS6AI score0.00406EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.19 views

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00968EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.38 views

Autodesk AutoCAD SLDPRT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00396EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.29 views

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00515EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.21 views

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00515EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.12 views

PT-2024-19687 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP or SLDPRT file, when parsed in ODXSW DLL.dll through Autodesk applications, can be used to access uninitialized variables. This issue, combined with other...

7.8CVSS7.1AI score0.00968EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2024/02/12 12:0 a.m.11 views

PT-2024-19682 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP file in atf dwg consumer.dll, when parsed through Autodesk applications, can lead to a memory corruption issue due to a write access violation. This issue...

7.8CVSS7.6AI score0.00602EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.20 views

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00459EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/02/12 12:0 a.m.22 views

Autodesk AutoCAD 3DM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3D...

7.8CVSS7.3AI score0.00401EPSS
SaveExploits0References2
Rows per page
Query Builder