Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

🗓️ 13 Jun 2024 00:00:00Reported by Mat Powell of Trend Micro Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 15 Views

Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Remote attackers can execute arbitrary code. User interaction is required. Flaw in parsing of SLDPRT files exists due to lack of proper validation of user-supplied data length. Attackers can execute code in the context of the current process.

Reporter	Title	Published	Views	Family All 23
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)	28 Mar 202400:00	–	nessus
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0009)	7 Jun 202400:00	–	nessus
BDU FSTEC	The vulnerabilities of the ODXSW_DLL.dll and libodxdll.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allow attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service interruptions.	11 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-23127	22 Feb 202404:26	–	circl
CNNVD	Autodesk AutoCAD Buffer Error Vulnerability	22 Feb 202400:00	–	cnnvd
CVE	CVE-2024-23127	22 Feb 202402:59	–	cve
Cvelist	CVE-2024-23127 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software	22 Feb 202402:59	–	cvelist
EUVD	EUVD-2024-20646	3 Oct 202520:07	–	euvd
NVD	CVE-2024-23127	22 Feb 202403:15	–	nvd
Prion	Heap overflow	22 Feb 202403:15	–	prion