Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

autodesk 3ds max vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2009-3577
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote malicious users to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."
Autodesk 3ds Max 2010Autodesk 3ds Max 2008Autodesk 3ds Max 2009Autodesk 3ds Max 6Autodesk 3ds Max 7Autodesk 3ds Max 8Autodesk 3ds Max 9
NA
CVE-2023-25002
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Autodesk Navisworks 2022Autodesk Revit 2022Autodesk 3ds Max 2022Autodesk Navisworks 2023Autodesk 3ds Max 2023Autodesk Revit 2023Autodesk Vred 2023
6.8
CVSSv2
CVE-2022-27532
A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.
Autodesk 3ds Max
NA
CVE-2022-25793
A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code f...
Autodesk 3ds Max
6.8
CVSSv2
CVE-2022-27531
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Autodesk 3ds Max
NA
CVE-2023-25006
A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.
Autodesk 3ds Max Usd
NA
CVE-2023-25007
A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution.
Autodesk 3ds Max Usd
NA
CVE-2023-25008
A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution.
Autodesk 3ds Max Usd
NA
CVE-2023-25009
A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution.
Autodesk 3ds Max Usd
6.8
CVSSv2
CVE-2022-27871
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron before 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
Autodesk Autocad Plant 3d 2019Autodesk Autocad Plant 3d 2020Autodesk Autocad Mep 2019Autodesk Autocad Mep 2020Autodesk Autocad Mechanical 2019Autodesk Autocad Mechanical 2020Autodesk Autocad Map 3d 2019Autodesk Autocad Map 3d 2020Autodesk Autocad Electrical 2019Autodesk Autocad Civil 3d 2019Autodesk Autocad Civil 3d 2020Autodesk Autocad Civil 3d 2021Autodesk Autocad Civil 3d 2022Autodesk Autocad Lt 2019Autodesk Autocad Lt 2020Autodesk Autocad Lt 2021Autodesk Autocad Lt 2022Autodesk Autocad Plant 3d 2021Autodesk Autocad Mep 2021Autodesk Autocad Mep 2022Autodesk Autocad Electrical 2020Autodesk Autocad Architecture 2019
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120CVE-2024-35921CVE-2024-35874brute forceCVE-2024-36080unprivilegedCVE-2024-35917IDORCVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook