Autodesk Design Review BMP Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

seek.autodesk.com XSS vulnerability

Vulnerable URL: http://seek.autodesk.com/category/Beds?sortBy=";alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check seek.autodesk.com SSL...

Autodesk Backburner Detection

Detects the installed version of Autodesk Backburner. This script sends a HTTP GET request and try to fetch the version of Autodesk Backburner from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Autodesk Backburner Multiple Vulnerabilities

Autodesk Backburner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

seek.autodesk.com XSS vulnerability

Vulnerable URL: http://seek.autodesk.com/search/%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 15.08.2016 Latest check for patch:| 15.08.2016 23:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

CVE-2016-2344

Stack-based buffer overflow in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016.0.0.2150 and earlier allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted command. NOTE: this is only a vulnerability in environments in which the...

CVE-2016-2344

Stack-based buffer overflow in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016.0.0.2150 and earlier allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted command. NOTE: this is only a vulnerability in environments in which the...

CVE-2016-2344

The CVE-2016-2344 issue affects Autodesk Backburner 2016 (versions 2016.0.0.2150 and earlier) where a stack-based buffer overflow in manager.exe (Backburner Manager) can be triggered by crafting commands sent to the service, allowing remote code execution or a denial of service. The vulnerability...

CVE-2016-2344

Stack-based buffer overflow in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016.0.0.2150 and earlier allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted command. NOTE: this is only a vulnerability in environments in which the...

KLA10778 arbitrary code execution vulnerability in Autodesk Backburner

An unspecified vulnerability was found in Autodesk Backburner. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed command. Original advisories CERT vulnerability Exploitation...

Autodesk Backburner Manager contains a stack-based buffer overflow vulnerability

Overview Autodesk Backburner 2016, version 2016.0.0.2150 and earlier, fails to properly check the length of command input which may be leveraged to create a denial of service condition or to execute arbitrary code. Description CWE-121: Stack-based Buffer Overflow - CVE-2016-2344The Autodesk...

Autodesk Design Review GIF GlobalColorTable DataSubBlock Buffer Overflow (CVE-2015-8572)

A heap buffer overflow vulnerability exists in Autodesk Design Review. The vulnerability is due to an error when processing GlobalColorTable flag and DataSubBlock size fields inside a GIF file. In order to exploit the vulnerability, the remote attacker needs to entice the target user to open a...

The vulnerabilities of the Autodesk Design Review software for applying electronic annotations allow a hacker to execute arbitrary code.

The multiple vulnerabilities of the Autodesk Design Review software for applying electronic annotations are caused by buffer overflows. Exploitation of these vulnerabilities could allow an attacker to execute arbitrary code remotely, using specially crafted RLE-encoded data in BMP and FLI files,...

The vulnerability of the Autodesk Design Review software for applying electronic annotations allows a hacker to execute arbitrary code.

The vulnerability of the Autodesk Design Review software for applying electronic annotations is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, using a specially crafted value of biClrUsed in the BMP file, which causes th...

Autodesk Design Review < 2013 Hotfix 2 Multiple RCE

The version of Autodesk Design Review installed on the remote Windows host is prior to 2013 Hotfix 2. It is, therefore, affected by the following vulnerabilities : - An integer overflow condition exists due to improper handling of BMP images. A remote attacker can exploit this, via a crafted...

autodesk.in Open Redirect vulnerability

Open Bug Bounty ID: OBB-119083 Description| Value ---|--- Affected Website:| autodesk.in Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

usa.autodesk.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-118522 Description| Value ---|--- Affected Website:| usa.autodesk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2015-8572

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...

CVE-2015-8571

Integer overflow in Autodesk Design Review ADR before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value in a BMP file, which triggers a buffer overflow...

Buffer overflow

Multiple buffer overflows in Autodesk Design Review ADR before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a 1 BMP or 2 FLI file, 3 encoded scan lines in a PCX file, or 4 DataSubBlock or 5 GlobalColorTable in a GIF file...