CVE-2014-3938

Autodesk SketchBook Pro is affected if installed version is prior to 6.2.6. The vulnerability arises from integer overflow and heap-based buffer overflow triggered by crafted layer mask data in a PSD file, which can lead to remote code execution (per the connected Nessus entries). The issue speci...

CVE-2014-3938

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3939

Autodesk SketchBook Pro is affected by CVE-2014-3939 (and related CVE-2014-3938). Prior to version 6.2.6, the product is vulnerable to a heap-based buffer overflow when processing layer bitmap data in PXD files (and similar via PSD/PXD inputs as per connected advisories). The root cause is a heap...

CVE-2014-3939

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

CVE-2014-3939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

CVE-2014-3938: Undefined Security Weakness

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-2967

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

Design/Logic Flaw

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

CVE-2014-2967

Autodesk VRED Pro 2014 (before SR1 SP8) is affected by an unauthenticated remote code execution via the built‑in web server’s Python API. An attacker can remotely execute arbitrary code by sending commands through the exposed Python API (using the os library) on the server (port 8888). Impact is ...

CVE-2014-2967

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

CVE-2014-2967: Improper Neutralization of Special Elements used in an OS Command

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36634/info Autodesk 3ds Max is prone to a vulnerability that lets attackers execute arbitrary commands in the context of the vulnerable application. This issue affects the following: 3ds Max 6 through 9 3ds Max 2008 throu...

Autodesk MapGuide Viewer ActiveX Denial of Service Vulnerability

No description provided by source. Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Cod...

Autodesk Softimage 7.0 Scene TOC File Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36637/info Autodesk Softimage is prone to a remote code-execution vulnerability. Successful exploits will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts...

Autodesk IDrop ActiveX Control Heap Memory Corruption

No description provided by source. $Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Autodesk DWG TrueView Detection

Binary data autodeskdwgtrueviewinstalled.nbin...

Autodesk DWG TrueView Buffer Overflow

The remote host has an install of Autodesk DWG TrueView version 2011, 2012, 2013 or 2014, and thus is affected by an error related to the handling of DWG files. The error exists due to a failure to properly bounds-check data in DWG files before using it to index and copy heap memory values. An...

Autodesk AutoCAD Insecure Library Loading (CVE-2014-0819)

An insecure library loading vulnerability has been reported in AutoCAD. The vulnerability is due to an improper dynamic link library DLL search path leading to insecure library loading. A remote attacker could exploit this vulnerability by enticing a user to process an AutoCAD file from a malicio...

Autodesk SketchBook Pro PSD通道RLE解压缓冲区溢出漏洞

Bugtraq ID:66563 CVE ID:CVE-2013-5365 Autodesk SketchBook Pro是速写簿软件。 Autodesk SketchBook Pro解压PSD文件内的RLE压缩通道数据时存在边界错误，这可使远程攻击者通过特制的PSD文件，利用此漏洞造成堆缓冲区溢出。 0 Autodesk SketchBook Pro 6.2.4 build 425798 for Windo 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...