Lucene search
+L

319 matches found

NVD
NVD
added 2024/10/29 10:15 p.m.38 views

CVE-2024-8598

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/29 9:13 p.m.33 views

CVE-2024-8599 Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:13 p.m.16 views

CVE-2024-8599 Autodesk AutoCAD ACTranslators STP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 9:13 p.m.75 views

CVE-2024-8599

CVE-2024-8599 refers to a memory corruption vulnerability in Autodesk AutoCAD that is triggered by parsing a malicious STP file in ACTranslators.exe. The issue can lead to a crash, potential exposure of sensitive data, or arbitrary code execution within the current process (local attacker, user i...

7.8CVSS7.8AI score0.00208EPSS
SaveExploits0References1Affected Software8
CVE
CVE
added 2024/10/29 9:12 p.m.71 views

CVE-2024-8597

Autodesk AutoCAD: CVE-2024-8597 affects STEP/STP parsing in ASMDATAX230A.dll. The vulnerability is described as a memory corruption that can crash the process or allow code execution. Exploitation requires user interaction (per ZDI advisory), and exists when parsing a malicious STEP/STP file. Aff...

7.8CVSS7.8AI score0.00208EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2024/10/29 9:12 p.m.42 views

CVE-2024-8597 Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS0.00208EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 9:12 p.m.12 views

CVE-2024-8597 Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/22 12:00 a.m.12 views

PT-2024-7534 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Memory Corruption vulnerability that can be triggered by parsing a maliciously crafted STP file in ACTranslators.exe through Autodesk AutoCAD. This can...

7.8CVSS8.5AI score0.00208EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/25 4:15 a.m.7 views

CVE-2024-23159

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS6.2AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/25 4:15 a.m.38 views

CVE-2024-23159

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/25 3:33 a.m.84 views

CVE-2024-23159

CVE-2024-23159 affects Autodesk AutoCAD and related AutoCAD-based products via parsing a malicious STP file in the stp_aim_x64_vc15d.dll. The issue exposes uninitialized memory, enabling code execution in the current process when a user opens or processes a crafted STP file, with attack vector lo...

7.8CVSS7.6AI score0.00316EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/25 3:33 a.m.19 views

CVE-2024-23159 Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS7.8AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/25 3:33 a.m.38 views

CVE-2024-23159 Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/25 1:24 a.m.56 views

CVE-2024-23142 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atfdwgconsumer.dll, rosex64vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/25 1:24 a.m.125 views

CVE-2024-23142

CVE-2024-23142 describes memory corruption via parsing CATPART/STP/MODEL files in Autodesk AutoCAD, leading to use-after-free and potential code execution in the affected process. Public references indicate the issue arises when these files are processed by components such as atf_dwg_consumer.dll...

7.8CVSS7.2AI score0.00436EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/25 12:00 a.m.9 views

Autodesk AutoCAD Security Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD version 2024.1.5, which originates when the Autodesk application parses a maliciously crafted STP file in stpaimx64vc15d.dll for uninitialized variables...

7.8CVSS6.8AI score0.00316EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2024/06/18 12:00 a.m.17 views

(0Day) Autodesk AutoCAD STP File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS7.2AI score0.00316EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.21 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.21 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.3AI score0.00515EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/06/13 12:00 a.m.15 views

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...

7.8CVSS6.6AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder