Lucene search
+L

3418 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.11 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.23 views

Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.5AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.17 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.15 views

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.4AI score0.00526EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.14 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.19 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.17 views

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00526EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.22 views

Autodesk AutoCAD STEP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.8AI score0.00427EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:0 a.m.23 views

Autodesk AutoCAD SLDASM File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.8AI score0.00526EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/07 12:0 a.m.142 views

Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0009)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2024.1.4. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted STP, CATPART or MODEL file in ASMKERN228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. ...

7.8CVSS7.4AI score0.00968EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
added 2024/04/03 12:0 a.m.5 views

PT-2024-7765

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted 3DM file can cause a memory corruption issue when parsed through Autodesk applications using opennurbs.dll and ASMkern229A.dll, potentially leading to code...

7.8CVSS6.7AI score0.00413EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2024/03/28 12:0 a.m.101 views

Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2024.1.3, 2023.1.5, 2022.1.4 or 2021.1.4. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted STP, CATPART or MODEL file in ASMKERN228A.dll when parsed through Autodesk AutoCAD c...

7.8CVSS7.4AI score0.00968EPSS
SaveExploits0References22
Zero Day Initiative
Zero Day Initiative
added 2024/03/27 12:0 a.m.23 views

Autodesk FBX Review ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00447EPSS
SaveExploits0References1
NCSC
NCSC
added 2024/03/19 12:0 a.m.12 views

Vulnerability fixed in Autodesk

Autodesk has fixed a vulnerability in DWG Trueview. A malicious party can exploit the vulnerability to cause a denial-of-service, execute arbitrary code with application privileges, or to gain access to sensitive data in the context of the application. Successful exploitation requires the malicio...

7.8CVSS7.4AI score0.0047EPSS
SaveExploits0
OSV
OSV
added 2024/03/18 12:15 a.m.7 views

CVE-2024-23138

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/18 12:15 a.m.25 views

CVE-2024-23138

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/18 12:15 a.m.32 views

CVE-2024-23139

A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS7.1AI score0.00447EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/18 12:15 a.m.4 views

CVE-2024-23139

A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS6.1AI score0.00447EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/17 11:58 p.m.53 views

CVE-2024-23139

Autodesk FBX Review is affected by CVE-2024-23139 through parsing of ActionScript Byte Code ABC files. The issue is an out-of-bounds write in the ABC file parser that can crash, corrupt data, or allow arbitrary code execution in the process context. Affected are Autodesk FBX Review versions 1.5.3...

7.8CVSS7.8AI score0.00447EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/17 11:58 p.m.13 views

CVE-2024-23139 ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software

A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS7AI score0.00447EPSS
SaveExploits0References1
Rows per page
Query Builder