3388 matches found
Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36634/info Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application. This issue affects the following: 3ds Max 6 through 9 3ds Max 2008 throu...
Autodesk IDrop ActiveX Control Heap Memory Corruption
No description provided by source. $Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Autodesk Softimage 7.0 Scene TOC File Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36637/info Autodesk Softimage is prone to a remote code-execution vulnerability. Successful exploits will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts...
Autodesk MapGuide Viewer ActiveX Denial of Service Vulnerability
No description provided by source. Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Cod...
Autodesk DWG TrueView Detection
Binary data autodeskdwgtrueviewinstalled.nbin...
Autodesk DWG TrueView Buffer Overflow
The remote host has an install of Autodesk DWG TrueView version 2011, 2012, 2013 or 2014, and thus is affected by an error related to the handling of DWG files. The error exists due to a failure to properly bounds-check data in DWG files before using it to index and copy heap memory values. An...
Autodesk AutoCAD Insecure Library Loading (CVE-2014-0819)
An insecure library loading vulnerability has been reported in AutoCAD. The vulnerability is due to an improper dynamic link library DLL search path leading to insecure library loading. A remote attacker could exploit this vulnerability by enticing a user to process an AutoCAD file from a malicio...
Autodesk SketchBook Pro PSD通道RLE解压缓冲区溢出漏洞
Bugtraq ID:66563 CVE ID:CVE-2013-5365 Autodesk SketchBook Pro是速写簿软件。 Autodesk SketchBook Pro解压PSD文件内的RLE压缩通道数据时存在边界错误,这可使远程攻击者通过特制的PSD文件,利用此漏洞造成堆缓冲区溢出。 0 Autodesk SketchBook Pro 6.2.4 build 425798 for Windo 目前厂商已经发布了升级补丁以修复漏洞,请下载使用:...
CVE-2013-5365
Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...
Heap overflow
Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...
CVE-2013-5365
Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...
CVE-2013-5365
Autodesk SketchBook vulnerability CVE-2013-5365 is a heap-based buffer overflow in affected SketchBook variants (Enterprise 2014, Pro, Express before 6.25; Copic Edition before 2.0.2). The flaw occurs while decompressing RLE-compressed channel data in PSD files, enabling remote code execution. Re...
Autodesk AutoCAD DWG Buffer Overflow
The remote host has a version of Autodesk AutoCAD installed that is potentially affected by an error related to handling DWG files that could lead to buffer overflows and possibly arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73292;...
Autodesk AutoCAD Detection
Binary data autocadinstalled.nbin...
Autodesk AutoCAD < 2014 Multiple Vulnerabilities
The remote host has a version of Autodesk AutoCAD installed prior to AutoCAD 2014. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling FAS files that could allow execution of arbitrary VBScript code. CVE-2014-0818 - An error exists relat...
Autodesk AutoCAD不可信搜索路径权限提升漏洞
CVE ID:CVE-2014-0819 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD不正确处理搜索路径,允许本地攻击者利用漏洞在当前工作目录存放木马DLL来提升权限。 0 Autodesk AutoCAD 2013 厂商补丁: Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序: http://www.autodesk.com/products/autodesk-autocad/overview...
Autodesk AutoCAD任意VBScript执行漏洞
CVE ID:CVE-2014-0818 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD打开文件时会加载特定的FAS文件,AutoCAD处理FAS文件搜索路径存在漏洞,允许攻击者利用漏洞加载任意VBscript代码。 0 Autodesk AutoCAD 2013 厂商补丁: Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序: http://www.autodesk.com/products/autodesk-autocad/overview...
CVE-2014-0819
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...
CVE-2014-0818
Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...