7.8

CVE-2024-8592

Autodesk AutoCAD CATPART File Parsing Memory Corruption Code Execution Vulnerability

A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability.  A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ Autocad Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Advance Steel Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Architecture Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Civil 3d Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Electrical Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Mechanical Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Mep Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Autodesk ≫ Autocad Plant 3d Version >= 2024 < 2024.1.6
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Autodesk 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0020
Vendor Advisory