High WID-SEC-2024-1881 1 CVE

Autodesk AutoCAD: Schwachstelle ermöglicht Codeausführung

Published Aug 19, 2024 · Updated Aug 20, 2024 · Revision 2 · de-DE

Vendor: Autodesk Product: AutoCAD Product: DWG TrueView Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Autodesk AutoCAD ausnutzen, um beliebigen Programmcode auszuführen.

Product

AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.

Vulnerabilities 1

High 7.8

CVE-2024-7305

DWF Vulnerability in Autodesk Desktop Software

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the c…

Autodesk AutoCAD AutoCAD Mechanical AutoCAD Plant 3D

Aug 19, 2024

Revision history

2024-08-20 #2
Updates von Autodesk aufgenommen
2024-08-19 #1
Initiale Fassung

References

National Vulnerability Database CVE-2024-7305 vom 2024-08-19
https://nvd.nist.gov/vuln/detail/CVE-2024-7305
Autodesk Security Advisory adsk-sa-2024-0014 vom 2024-08-19
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0014