CVE-2010-5226: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll, 2 whiptkwt.7.12.601.dll, or 3 xamlwt.7.6.0.dll file in the current working directory, as demonstrated by a directory that contains a .dwf...

FlexNet License Server Manager lmgrd Buffer Overflow

This module exploits a vulnerability in the FlexNet License Server Manager. The vulnerability is due to the insecure usage of memcpy in the lmgrd service when handling network packets, which results in a stack buffer overflow. In order to improve reliability, this module will make lots of...

Autodesk MapGuide Viewer Overflow

Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Code: ACCESSVIOLATION Disasm: 175CE9E...

Autodesk MapGuide Viewer - ActiveX Denial of Service

Autodesk MapGuide Viewer - ActiveX Denial of Service Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL...

Autodesk MapGuide Viewer ActiveX Denial of Service

Exploit for windows platform in category dos / poc ================================================== Autodesk MapGuide Viewer ActiveX Denial of Service ================================================== Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date:...

Autodesk MapGuide Viewer - ActiveX Denial of Service

Exploit Title: Autodesk MapGuide Viewer ActiveXMGAXCTRL.DLLOverflow Vulnerability Date: 01-09-2010 Author: d3b4g Software Link: http://usa.autodesk.com/adsk/servlet/item?siteID=123112&id=9454821 Version: 6.5 Tested on: Winxp SP3 regards to ROL guys Exception Code: ACCESSVIOLATION Disasm: 175CE9E...

Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)

No description provided by source. / Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll...

Autodesk AutoCAD 2007 DLL Hijacking Exploit

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...

Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)

Exploit for windows platform in category local exploits ======================================================= Autodesk AutoCAD 2007 dll Hijacking exploit color.dll ======================================================= / Description: A vulnerability exists in windows that allows other...

Autodesk AutoCAD 2007 - 'color.dll' DLL Hijacking

/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...

Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

$Id: autodeskidrop.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Autodesk 3DS Max code execution

It's possible to embed code into .max files...

Autodesk SoftImage code execution

It's possible to embed commands into .scntoc files...

CORE-2009-0910: Autodesk Maya Script Nodes Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk Maya Script Nodes Arbitrary Command Execution 1. Advisory Information Title: Autodesk Maya Script Nodes Arbitrary Command Execution Advisory Id: CORE-2009-09...

Autodesk Maya code execution

It's possible to embed scripts into application files...

Autodesk IDrop ActiveX Control Heap Memory Corruption

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Autodesk IDrop ActiveX Control Heap Memory Corruption', 'Description' = %q This module exploits a heap-based memory corruption...

CORE-2009-0908: Autodesk SoftImage Scene TOC Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id:...

CORE-2009-0909: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk 3DS Max Application Callbacks Arbitrary Command Execution 1. Advisory Information Title: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution...

CVE-2009-3576

Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents aka .scntoc file with a ScriptContent element, as demonstrated by code that loads the WScript.Shell ActiveX control...

Command injection

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a 1 .ma or 2 .mb file that uses the Maya Embedded Language MEL python command or unspecified other MEL commands, related to "Script Nodes."...