CVE-2024-23132
Assigner: autodesk
Published: 2024-02-22T04:10:53.175Z
State: PUBLISHED
affected: defaultStatus: unknown
product: AutoCAD, Advance Steel and Civil 3D
vendor: Autodesk
versions: status: affected
version: 2024, 2023, 2022, 2021
descriptions: supportingMedia: base64: no
type: text/html
value: <span style="background-color: rgb(255, 255, 255);">A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk AutoCAD could lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.</span><br>
value: A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk AutoCAD could lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

problemTypes: descriptions: cweId: CWE-119
description: CWE-119 Memory Corruption - Generic
type: CWE
source: discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev