Heap overflow

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

CVE-2013-5365

Autodesk SketchBook vulnerability CVE-2013-5365 is a heap-based buffer overflow in affected SketchBook variants (Enterprise 2014, Pro, Express before 6.25; Copic Edition before 2.0.2). The flaw occurs while decompressing RLE-compressed channel data in PSD files, enabling remote code execution. Re...

CVE-2013-5365: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file...

Autodesk AutoCAD DWG Buffer Overflow

The remote host has a version of Autodesk AutoCAD installed that is potentially affected by an error related to handling DWG files that could lead to buffer overflows and possibly arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73292;...

Autodesk AutoCAD Detection

Binary data autocadinstalled.nbin...

Autodesk AutoCAD < 2014 Multiple Vulnerabilities

The remote host has a version of Autodesk AutoCAD installed prior to AutoCAD 2014. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling FAS files that could allow execution of arbitrary VBScript code. CVE-2014-0818 - An error exists relat...

Autodesk AutoCAD不可信搜索路径权限提升漏洞

CVE ID:CVE-2014-0819 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD不正确处理搜索路径，允许本地攻击者利用漏洞在当前工作目录存放木马DLL来提升权限。 0 Autodesk AutoCAD 2013 厂商补丁： Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.autodesk.com/products/autodesk-autocad/overview...

Autodesk AutoCAD任意VBScript执行漏洞

CVE ID:CVE-2014-0818 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD打开文件时会加载特定的FAS文件，AutoCAD处理FAS文件搜索路径存在漏洞，允许攻击者利用漏洞加载任意VBscript代码。 0 Autodesk AutoCAD 2013 厂商补丁： Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.autodesk.com/products/autodesk-autocad/overview...

CVE-2014-0818

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

CVE-2014-0819

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

CVE-2014-0819

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2014-0819

CVE-2014-0819 affects Autodesk AutoCAD prior to 2014. The vulnerability is an insecure DLL search path: a Trojan DLL placed in the current working directory can be loaded, enabling local privilege escalation/arbitrary code execution. Affected products: AutoCAD 2013 and earlier. Root cause: untrus...

CVE-2014-0818

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...

CVE-2014-0818

CVE-2014-0818 : In Autodesk AutoCAD (pre-2014), an insecure FAS file search path allows a Trojan horse FAS to be loaded, enabling a local user to gain privileges and execute arbitrary VBScript code. Affected products are AutoCAD 2013 and earlier. Root cause: improper handling of the FAS file sear...

CVE-2014-0819: Improper Input Validation

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

KLA10082 LPE vulnerabilities in AutoCAD

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories - Exploitation Related products AutoCAD CVE list...

CVE-2014-0818: Improper Control of Generation of Code

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path...