CVE-2024-23124
Assigner: autodesk
Published: 2024-02-22T02:14:25.627Z
State: PUBLISHED
affected: defaultStatus: unknown
product: AutoCAD, Advance Steel and Civil 3D
vendor: Autodesk
versions: status: affected
version: 2024, 2023, 2022, 2021
descriptions: supportingMedia: base64: no
type: text/html
value: <span style="background-color: rgb(255, 255, 255);"><span style="background-color: rgb(255, 255, 255);">A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.</span></span><br>
value: A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

problemTypes: descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
source: discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev