Lucene search
+L

1008 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•21 views

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00481EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•23 views

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00459EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•20 views

PT-2024-19687 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP or SLDPRT file, when parsed in ODXSW DLL.dll through Autodesk applications, can be used to access uninitialized variables. This issue, combined with other...

7.8CVSS7.1AI score0.00968EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•16 views

PT-2024-19684 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted IGS or IGES file in tbb.dll, when parsed through Autodesk AutoCAD, can be used in a user-after-free issue. This issue, along with other issues, could lead to...

7.8CVSS7.4AI score0.00488EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•9 views

PT-2024-7782

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted file, such as MODEL, SLDPRT, or SLDASM, can cause a Heap-based Overflow when parsed in ODXSW DLL.dll and libodxdll.dll through Autodesk applications. This can...

7.8CVSS7.2AI score0.00515EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•14 views

PT-2024-19680 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW DLL.dll through Autodesk applications, can lead to a memory corruption issue by write access violation. This issue...

7.8CVSS7.7AI score0.00526EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•26 views

PT-2024-19677

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access...

7.8CVSS7.1AI score0.00515EPSS
SaveExploits0References17
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•26 views

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.3AI score0.00515EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•2 views

PT-2024-19685

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted SLDPRT file can be used in a user-after-free vulnerability when parsed through Autodesk applications, potentially leading to code execution in the current...

7.8CVSS6.5AI score0.00478EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/02/12 12:00 a.m.•4 views

PT-2024-19681

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll, or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption...

7.8CVSS6.2AI score0.00515EPSS
SaveExploits0References38
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•27 views

Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.3AI score0.00515EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•16 views

Autodesk AutoCAD STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00554EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/02/12 12:00 a.m.•26 views

Autodesk AutoCAD SLDASM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00515EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•5 views

PT-2024-8182

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory corruption vulnerability caused by a buffer overflow in the ASMKERN228A.dll and ASMKERN229A.dll libraries of Autodesk AutoCAD. This can be exploite...

10CVSS6.6AI score0.00427EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•5 views

PT-2024-7768

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW DLL.dll through Autodesk applications, can lead to a memory corruption issue due to a write access violation. This c...

9.3CVSS6.3AI score0.00413EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•14 views

PT-2024-8052

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is caused by a maliciously crafted CATPART file that, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write. This can...

10CVSS7.8AI score0.00423EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•20 views

PT-2024-7769

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is caused by a maliciously crafted PRT file, which when parsed in odxug dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write. This can allow a malicious actor...

9.3CVSS7.2AI score0.00389EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•21 views

PT-2024-8048 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf api.dll through Autodesk applications, can force an Out-of-Bound Read. This can allow a malicious act...

10CVSS6.8AI score0.00423EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/02/06 12:00 a.m.•15 views

PT-2024-8053

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted PRT file can force an Out-of-Bound Read when parsed in opennurbs.dll through Autodesk applications. This can allow a malicious actor to cause a crash, read...

10CVSS7AI score0.00415EPSS
SaveExploits0References9
OSV
OSV
•added 2023/11/23 4:15 a.m.•16 views

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS6.2AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder