Autodesk SketchBook Pro < 6.2.5 / SketchBook Copic Edition < 2.0.2 Heap Buffer Overflow

The version of Autodesk SketchBook installed on the remote host is Pro prior to 6.2.5 or Copic Edition prior to 2.0.2. It is, therefore, affected by a heap-based buffer overflow vulnerability. The flaw exists when decompressing RLE-compressed channel data in PSD files, since user-supplied input i...

Autodesk SketchBook Pro < 6.2.5 / SketchBook Copic Edition < 2.0.2 Heap Buffer Overflow

The version of Autodesk SketchBook installed on the remote Mac OS X host is Pro prior to 6.2.5 or Copic Edition prior to 2.0.2. It is, therefore, affected by a heap-based buffer overflow vulnerability. The flaw exists when decompressing RLE-compressed channel data in PSD files, since user-supplie...

Autodesk VRED Detection

Binary data autodeskvredinstalled.nbin...

Autodesk VRED Python API Remote Code Execution

The remote host has a version of Autodesk VRED that is vulnerable to an unauthenticated remote code execution via a Python API exposed by its built-in web server. This can allow a remote attacker to execute arbitrary code on the host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Autodesk VRED Pro 2014 < SR1 SP8 Remote Code Execution

The remote host has a version of Autodesk VRED Pro that is vulnerable to an unauthenticated remote code execution via a Python API exposed by its built-in web server. This can allow a remote attacker to execute arbitrary code on the host. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2014-3939

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

Heap overflow

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

Integer overflow

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3939

Autodesk SketchBook Pro is affected by CVE-2014-3939 (and related CVE-2014-3938). Prior to version 6.2.6, the product is vulnerable to a heap-based buffer overflow when processing layer bitmap data in PXD files (and similar via PSD/PXD inputs as per connected advisories). The root cause is a heap...

CVE-2014-3939

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

CVE-2014-3938

Autodesk SketchBook Pro is affected if installed version is prior to 6.2.6. The vulnerability arises from integer overflow and heap-based buffer overflow triggered by crafted layer mask data in a PSD file, which can lead to remote code execution (per the connected Nessus entries). The issue speci...

CVE-2014-3938

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3938: Undefined Security Weakness

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow...

CVE-2014-3939: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file...

PT-2014-5618

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook Pro versions prior to 6.2.6 Description The issue is related to an integer overflow that can be triggered by crafted layer mask data in a PSD file, leading to a heap-based buffer overflow. This can allow remote attackers to...

PT-2014-5619

Name of the Vulnerable Software and Affected Versions Autodesk SketchBook Pro versions prior to 6.2.6 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file. Recommendations For versions prior to 6.2.6, update t...

CVE-2014-2967

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

Design/Logic Flaw

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

CVE-2014-2967

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

CVE-2014-2967

Autodesk VRED Pro 2014 (before SR1 SP8) is affected by an unauthenticated remote code execution via the built‑in web server’s Python API. An attacker can remotely execute arbitrary code by sending commands through the exposed Python API (using the os library) on the server (port 8888). Impact is ...