CVE-2024-37002
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)
Description
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected (36)
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 2022 to 2022.1.5 |
Related CWEs
References (2)
Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.