Autodesk AutoCAD任意VBScript执行漏洞

CVE ID:CVE-2014-0818 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD打开文件时会加载特定的FAS文件，AutoCAD处理FAS文件搜索路径存在漏洞，允许攻击者利用漏洞加载任意VBscript代码。 0 Autodesk AutoCAD 2013 厂商补丁： Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.autodesk.com/products/autodesk-autocad/overview...

CVE-2014-0818

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

CVE-2014-0819

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

Design/Logic Flaw

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2014-0819

CVE-2014-0819 affects Autodesk AutoCAD prior to 2014. The vulnerability is an insecure DLL search path: a Trojan DLL placed in the current working directory can be loaded, enabling local privilege escalation/arbitrary code execution. Affected products: AutoCAD 2013 and earlier. Root cause: untrus...

CVE-2014-0819

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2014-0818

CVE-2014-0818 : In Autodesk AutoCAD (pre-2014), an insecure FAS file search path allows a Trojan horse FAS to be loaded, enabling a local user to gain privileges and execute arbitrary VBScript code. Affected products are AutoCAD 2013 and earlier. Root cause: improper handling of the FAS file sear...

CVE-2014-0818

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

KLA10082 LPE vulnerabilities in AutoCAD

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories - Related products AutoCAD CVE list CVE-2014-0819 warning...

AutoCAD may insecurely load dynamic libraries

Overview AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. kaito834 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

AutoCAD vulnerable to arbitrary VBScript execution

Overview AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD loads specific FAS files when opening files. AutoCAD contains an issue with the FAS file search path, which may lead to arbitrary VBScript code execution. kaito834 reported this vulnerability to...

JVN#43254599: AutoCAD may insecurely load dynamic libraries

AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact Arbitrary code may be executed with the privileges of the running application. Solution Upgrade t...

JVN#33382534: AutoCAD vulnerable to arbitrary VBScript execution

AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD loads specific FAS files when opening files. AutoCAD contains an issue with the FAS file search path, which may lead to arbitrary VBScript code execution. Impact Arbitrary VBScript code may be executed wi...

Autocad DWG-AC1021 Heap Corruption

AutoCAD is a software for computer-aided design CAD and technical drawing in 2D/3D, being one of the world leading CAD design tools. It is developed and sold by Autodesk, Inc. Title: AutoCAD DWG-AC1021 Heap Corruption CVE Name: CVE-2013-3665 Permalink:...

Autodesk 多个产品DWG处理代码执行漏洞(CVE-2013-3665)

CVECAN ID: CVE-2013-3665 Autodesk是二维和三维设计、工程及娱乐软件厂商，旗下拥有拥有“AutoCAD”、“3DS Max”等知名软件。 多个Autodesk产品在处理DWG文件时存在安全漏洞，可被恶意用户利用执行任意代码，从而破坏用户系统。 0 Autodesk AutoCAD 2013 Autodesk AutoCAD 2012 Autodesk AutoCAD 2011 Autodesk AutoCAD Civil 3D 2013.x Autodesk AutoCAD Civil 3D 2012.x Autodesk AutoCAD Civil 3D...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

Code injection

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

CVE-2013-3665

CVE-2013-3665 affects Autodesk AutoCAD (2011–2014), AutoCAD LT (2011–2014) and DWG TrueView (2011–2014). The root cause is a bounds-checking failure when processing DWG files, which could allow an attacker to trigger arbitrary code execution via a specially crafted DWG file. Impact is remote code...