Lucene search
+L

415 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•37 views

Autodesk Navisworks Manage DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.00663EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•64 views

Autodesk Navisworks Freedom DWF File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.4AI score0.01112EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•26 views

Autodesk Navisworks Manage DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01562EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•29 views

Autodesk Navisworks Manage DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01562EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•31 views

Autodesk Navisworks Manage DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Manage. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6AI score0.01561EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•43 views

Autodesk Navisworks Freedom DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6AI score0.01561EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/04/05 12:00 a.m.•18 views

Autodesk Navisworks Freedom DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.01562EPSS
SaveExploits0References1
Debian
Debian
•added 2022/03/07 12:10 p.m.•77 views

[SECURITY] [DLA 2934-1] freecad security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2934-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 07, 2022 https://wiki.debian.org/LTS -...

7.8CVSS7.6AI score0.01111EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•4 views

PT-2022-17516

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Description A maliciously crafted DWF, 3DS, and DWFX files can be used to trigger a use-after-free issue. Exploitation of this issue may lead to code execution. Recommendations For Autodesk AutoCAD...

7.8CVSS0.01642EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•2 views

PT-2022-17519

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Autodesk Navisworks versions 2022 Description A Memory Corruption issue exists in the parsing of DWF and DWFX files, potentially leading to code execution through maliciously crafted DLL files. This...

7.8CVSS0.00663EPSS
SaveExploits0References9
Zero Day Initiative
Zero Day Initiative
•added 2022/03/07 12:00 a.m.•43 views

Autodesk AutoCAD DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5.7AI score0.01561EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/07 12:00 a.m.•27 views

Autodesk AutoCAD DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5AI score0.01562EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/07 12:00 a.m.•40 views

Autodesk AutoCAD DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5.4AI score0.00663EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/07 12:00 a.m.•49 views

Autodesk AutoCAD DWF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS5AI score0.01562EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/03/07 12:00 a.m.•37 views

Autodesk AutoCAD DWF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DW...

7.8CVSS4.4AI score0.01642EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/07 12:00 a.m.•4 views

PT-2022-17518

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Autodesk Navisworks versions 2022 Description The issue arises from a maliciously crafted DWF file that can be used to write beyond the allocated boundaries when parsing the DWF files, potentially...

7.8CVSS0.01562EPSS
SaveExploits0References12
OSV
OSV
•added 2022/01/25 8:15 p.m.•11 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6AI score0.07734EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/25 8:15 p.m.•10 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.2AI score0.07734EPSS
SaveExploits0References2
CVE
CVE
•added 2022/01/25 7:11 p.m.•98 views

CVE-2021-40167

Autodesk Design Review is affected by CVE-2021-40167 through memory corruption in the DWF/.pct file parsing pathway, potentially enabling code execution. Multiple sources (NVD, ZDI, CNA/CNNVD) describe a vulnerability in the DesignReview.exe parser that can be triggered by maliciously crafted DWF...

7.8CVSS7.8AI score0.07734EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/25 12:00 a.m.•7 views

CVE-2021-40167: Out-of-bounds Read

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6.4AI score0.07734EPSS
SaveExploits0References2
Rows per page
Query Builder