(0Day) Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerabilities of the libraries atf_dwg_consumer.dll, rose_x64_vc15.dll, and libodxdll, which are part of the AutoCAD simulation, design, and drafting software, allow a malicious actor to execute arbitrary code.

The vulnerability of the atfdwgconsumer.dll, rosex64vc15.dll, and libodxdll libraries, which are used in AutoCAD software for simulation, design, and drafting, relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perfo...

The vulnerability of the stp_aim_x64_vc15d.dll software, which is used for simulation, design, and drafting in AutoCAD, allows a perpetrator to execute arbitrary code.

The vulnerability of the stpaimx64vc15d.dll software library, which is used for simulation, design, and drawing in AutoCAD, relates to the use of an uninitialized variable. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially created STP fil...

Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

CVE-2024-8599

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8598

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8597

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8598

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8597

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8599 Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8599 Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8599

CVE-2024-8599 refers to a memory corruption vulnerability in Autodesk AutoCAD that is triggered by parsing a malicious STP file in ACTranslators.exe. The issue can lead to a crash, potential exposure of sensitive data, or arbitrary code execution within the current process (local attacker, user i...

CVE-2024-8597 Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8597 Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8597

Autodesk AutoCAD: CVE-2024-8597 affects STEP/STP parsing in ASMDATAX230A.dll. The vulnerability is described as a memory corruption that can crash the process or allow code execution. Exploitation requires user interaction (per ZDI advisory), and exists when parsing a malicious STEP/STP file. Aff...

PT-2024-7534 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Memory Corruption vulnerability that can be triggered by parsing a maliciously crafted STP file in ACTranslators.exe through Autodesk AutoCAD. This can...

CVE-2024-23159

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23159

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23159 Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23159

CVE-2024-23159 affects Autodesk AutoCAD and related AutoCAD-based products via parsing a malicious STP file in the stp_aim_x64_vc15d.dll. The issue exposes uninitialized memory, enabling code execution in the current process when a user opens or processes a crafted STP file, with attack vector lo...