3928 matches found
CVE-2023-29075: Out-of-bounds Write
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2023-29073: Heap-based Buffer Overflow
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2023-41139: Untrusted Pointer Dereference
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...
CVE-2023-29076: Improper Restriction of Operations within the Bounds of a Memory Buffer
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...
CVE-2023-29074: Out-of-bounds Write
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
Autodesk AutoCAD Buffer Error Vulnerability
Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD versions 2023 and 2024, which stems from parsing a maliciously crafted STP file can lead to dereferencing of untrusted pointers, which can be...
CVE-2023-41140: Heap-based Buffer Overflow
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2023-41145
Autodesk users who no longer have an active license for an account can still access cases for that account...
CVE-2023-41146
Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account...
Design/Logic Flaw
Autodesk users who no longer have an active license for an account can still access cases for that account...
CVE-2023-41146
Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account...
CVE-2023-41146
CVE-2023-41146 affects Autodesk Customer Support Portal. The vulnerability is a design/logic flaw in access control where cases created by one user on a given account can be viewed by other users on the same account. Documented impact is exposure of potentially sensitive case information without ...
CVE-2023-41145
Autodesk users who no longer have an active license for an account can still access cases for that account...
CVE-2023-41145
CVE-2023-41145 affects Autodesk Customer Portal. Affected component: Autodesk Customer Portal access control allows users without an active license for an account to still access cases for that account. This is described across multiple sources (Autodesk advisory ADSK-SA-2023-0020; Red Hat RH CVE...
Autodesk Customer Portal Security Vulnerability
Autodesk Customer Portal is a customer portal component from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Customer Portal that stems from allowing cases created by a user under one account to view cases created by other users under the same account...
PT-2023-27822 · Autodesk · Autodesk Customer Support Portal
Name of the Vulnerable Software and Affected Versions: Autodesk Customer Support Portal affected versions not specified Description: The issue allows cases created by users under an account to be visible to other users on the same account, potentially exposing sensitive information...
PT-2023-27821 · Autodesk · Autodesk
Name of the Vulnerable Software and Affected Versions: Autodesk affected versions not specified Description: The issue allows Autodesk users who no longer have an active license for an account to still access cases for that account. Recommendations: At the moment, there is no information about a...
Autodesk Customer Portal Security Vulnerability
Autodesk Customer Portal is a customer portal component of Autodesk USA. A security vulnerability exists in Autodesk Customer Portal that stems from cases where Autodesk users who no longer have a valid license for an account can still access that account...
Autodesk Desktop Connector Code Issue Vulnerability
Autodesk Desktop Connector is a desktop connection software from Autodesk, Inc. A security vulnerability exists in Autodesk Desktop Connector 16.2.1 and earlier versions, which stems from a maliciously crafted DLL file that could be forced to install to a non-default location and could be used by...