Null pointer dereference

The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service...

CVE-2021-27029

The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service...

CVE-2021-27028

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files...

CVE-2021-27027

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure...

CVE-2021-27031

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...

CVE-2021-27030

A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system...

CVE-2021-27029

The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service...

CVE-2021-27028

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files...

CVE-2021-27028

CVE-2021-27028 is a memory corruption vulnerability in Autodesk FBX Review (versions up to 1.5.0) that can lead to remote code execution when processing crafted DLLs. The vulnerability lies in the FBX file parsing path, as described by multiple sources (ZDI advisories and vendor notices), which c...

CVE-2021-27027

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure...

CVE-2021-27027

Autodesk FBX Review is affected (versions 1.5.0 and prior) by an Out-of-Bounds read/write vulnerability in FBX file parsing. The issue can lead to arbitrary code execution or information disclosure; exploitation requires user interaction (e.g., opening a crafted FBX file) and is associated with Z...

Autodesk FBX Review 路径遍历漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A directory traversal remote code execution vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability by tricking a user into opening a malicious FBX file to ru...

Autodesk FBX Review 资源管理错误漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A post-release reuse vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability by tricking a user into opening a malicious FBX file to run arbitrary code on the...

Autodesk FBX Review 代码问题漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A null pointer dereference vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability by tricking a user into opening a malicious FBX file, causing the applicati...

Autodesk FBX Review 缓冲区错误漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. An out-of-bounds read/write vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker could exploit this vulnerability via specially crafted DLL files to achieve remote code execution or obta...

Google Releases Security Updates for Chrome

Google has updated the stable channel for Chrome to 90.0.4430.72 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome release and apply the necessary...

SAP Releases April 2021 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the SAP Security Notes for April 2021 and apply the necessary...

WordPress Content Copy Protection & Prevent Image Save <= 1.3 - Authenticated Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Request Forgery CSRF vulnerability discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress WP Login Security and History plugin <= 1.0 - Authenticated Persistent XSS & XFS vulnerabilities

Authenticated Persistent XSS & XFS vulnerabilities discovered by m0ze in WordPress WP Login Security and History plugin versions = 1.0. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...

WordPress Content Copy Protection & Prevent Image Save plugin <= 1.3 - Authenticated Persistent XSS & XFS vulnerabilities

Authenticated Persistent XSS & XFS vulnerabilities discovered by m0ze in WordPress Content Copy Protection & Prevent Image Save plugin versions = 1.3. Solution This plugin has been closed as of April 5, 2021 and is not available for download. This closure is temporary, pending a full review...