A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Autodesk autocad Electrical
Autodesk autocad Mep Autodesk Autodesk civil 3d Autodesk autocad Plant 3d Autodesk advance Steel Autodesk autocad Autodesk autocad Mechanical Autodesk autocad Architecture |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:* |
29 Oct 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-29 21:15
Updated : 2024-12-16 00:15
NVD link : CVE-2024-8587
Mitre link : CVE-2024-8587
JSON object : View
Products Affected
autodesk
- autocad_mechanical
- autocad
- autocad_electrical
- advance_steel
- autocad_plant_3d
- autocad_mep
- civil_3d
- autocad_architecture
CWE
CWE-787
Out-of-bounds Write