CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Design/Logic Flaw

Parsing a maliciously crafted XB and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Spoofing

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

PT-2022-26673 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya versions 2022 through 2023 Description: Parsing a maliciously crafted X B and PRT file can force Autodesk Maya to read beyond allocated buffer. This issue, in conjunction with other vulnerabilities, could lead to code execution ...

CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

CVE-2022-42946

Parsing a maliciously crafted XB and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

PT-2022-26674 · Autodesk · Autodesk Maya

Name of the Vulnerable Software and Affected Versions: Autodesk Maya versions 2022 through 2023 Description: A maliciously crafted X B file can be used to write beyond the allocated buffer when parsed through Autodesk Maya. This issue can lead to arbitrary code execution. Recommendations: For...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

CVE-2022-42947

CVE-2022-42947 is an out-of-bounds write vulnerability in Autodesk Maya (versions 2022 and 2023) triggered by parsing a malicious X_B file. The issue allows arbitrary code execution and is exploitable with user interaction (the attacker must entice the target to open or process a crafted X_B file...

CVE-2022-42947

A maliciously crafted XB file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

CVE-2022-42946

CVE-2022-42946 affects Autodesk Maya (2022/2023) via parsing of X_B and PRT files. The vulnerability can cause reads (and in some advisories writes) beyond allocated buffers, enabling code execution in the process context. ZDI reports remote code execution with user interaction (visiting a malici...

Autodesk Maya code execution

It's possible to embed scripts into application files...

CORE-2009-0910: Autodesk Maya Script Nodes Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-09...

Command injection

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...

CVE-2009-3578

CVE-2009-3578 affects Autodesk Maya (versions 8.0/8.5/2008/2009/2010) and Alias Wavefront Maya 6.5–7.0. The vulnerability arises from Script Nodes that can contain MEL or Python code embedded in .ma/.mb scene files. Opening such a file can cause arbitrary code execution under the user’s privilege...

CVE-2009-3578

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...

Autodesk Maya脚本节点文件远程代码执行漏洞

BUGTRAQ ID: 36636 CVE ID: CVE-2009-3578 Maya是一款高端的3D计算机图形和3D建模软件包。 Maya提供了被称为“脚本节点”的方式用于使用MEL（Maya的专有编程语言）和Python对动画行为进行编程。脚本节点保存为.mb和.ma文件格式。通过使用嵌入有脚本节点的特制文件，用户打开恶意的场景文件后就会无需任何干涉便可执行任意命令。 Autodesk Maya 8.5 Autodesk Maya 8.0 Autodesk Maya 2010 Autodesk Maya 2009 Autodesk Maya 2008 临时解决方法：...

Autodesk Maya Script Nodes Arbitrary Command Execution

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command...

Core Security Technologies Advisory 2009.0910

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-09...