Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2023-0018)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2023.1.4. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious...

Autodesk Maya Installed (macOS)

Binary data autodeskmayamacosinstalled.nbin...

PT-2023-5413 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD versions 2023 through 2024 Description: The issue is related to a memory corruption vulnerability when parsing certain file types, including SLDASM, MODEL, SAT, and CATPART files. This vulnerability can be exploited to execut...

Autodesk Maya Installed (Linux)

Binary data autodeskmayalinuxdetect.nbin...

Autodesk Maya USD Plugin < 0.23.0 Multiple Vulnerabilities (ADSK-SA-2023-0003)

The version of Autodesk Maya USD Plugin installed on the remote host is prior to 0.23.0. It is, therefore, affected by multiple vulnerabilities: - A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution...

Autodesk Maya Plugins Installed (Windows)

Binary data autodeskmayawinpluginsdetect.nbin...

PT-2023-9654

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. This vulnerability can be leveraged by a...

PT-2023-9655

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to an Out-of-Bounds Write vulnerability in the libodxdll.dll library of Autodesk AutoCAD, caused by parsing a maliciously crafted MODEL file. This can allow an...

CVE-2023-25001

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2023-25002

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2023-25002

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2023-25002

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2023-25001

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

Design/Logic Flaw

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

Design/Logic Flaw

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2023-25004

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution...

CVE-2023-25004

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution...

CVE-2023-25004

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution...

CVE-2023-25004

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution...

CVE-2023-25001

CVE-2023-25001 affects Autodesk Navisworks 2023 and 2022. The issue is a use-after-free during parsing of SKP files, which may allow code execution. Connected sources describe the flaw but do not provide patch versions or remediation specifics for Navisworks. No explicit exploitation details are ...