Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DAE format files.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAutodesk Fbx Software Development Kit
APPAutodesk≤ 2017.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Powiązane podatności
CVE-2016-9303CRITICAL9.8ten sam produkt
Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code ...
CVE-2016-9305CRITICAL9.8ten sam produkt
Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects rela...
CVE-2016-9307CRITICAL9.8ten sam produkt
Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code ...
CVE-2023-27909HIGH7.8ten sam produkt
An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution th...
CVE-2023-27910HIGH7.8ten sam produkt
A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability...