Medium WID-SEC-2023-0826 3 CVEs

Autodesk FBX SDK: Mehrere Schwachstellen

Published Apr 2, 2023 · Updated Sep 17, 2023 · Revision 2 · de-DE

Vendor: Autodesk Vendor: Microsoft Product: 365 Apps Product: FBX SDK < 2020.3.4 Product: Office 2019 Product: Visual Studio Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk FBX SDK ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.

Product

Das Autodesk FBX SDK ist eine C++-Softwareentwicklungsplattform und ein API-Toolkit.

Vulnerabilities 3

High 7.8

CVE-2023-27909

An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through mal…

Apr 17, 2023
High 7.8

CVE-2023-27910

A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autod…

Apr 17, 2023
High 7.8

CVE-2023-27911

A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autode…

Apr 17, 2023

Revision history

2023-09-17 #2
Neue Updates aufgenommen
2023-04-02 #1
Initiale Fassung

References

Microsoft Security Update Guide
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-27909
Microsoft Security Update Guide
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-27911
Autodesk Security Advisory adsk-sa-2023-0004 vom 2023-04-02
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0004