CVE-2024-11422

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422

creationtimestamp| type| source ---|---|--- 2024-12-17 15:20:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113668837672027134 2024-12-17 17:37:00+00:00| seen| https://t.me/cvedetector/13111 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1699/...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422

CVE-2024-11422 affects Autodesk Navisworks family (Navisworks Manage, Simulate, Freedom) via parsing of DWFX files. The issue is an out-of-bounds write in the DWFX parser which can crash, corrupt data, or allow arbitrary code execution in the current process. Exploitation requires user interactio...