CVE-2024-23139

2024-03-1723:58:50

CWE-787

autodesk

github.com

autodesk fbx review

out-of-bounds write

code execution

information disclosure

actionscript byte code

flash compiler

AI Score

7.4

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An Out-Of-Bounds Write Vulnerability in Autodesk FBX Review version 1.5.3.0 and prior may lead to code execution or information disclosure through maliciously crafted ActionScript Byte Code “ABC” files. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*"
    ],
    "vendor": "autodesk",
    "product": "fbx_review",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.5.3.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]