A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Dec 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-122 |
12 Dec 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
07 Nov 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:* |
|
| First Time |
Autodesk autocad Mechanical
Autodesk autocad Mep Autodesk autocad Plant 3d Autodesk Autodesk civil 3d Autodesk advance Steel Autodesk autocad Electrical Autodesk autocad Autodesk autocad Architecture |
01 Nov 2024, 12:57
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Oct 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-29 21:15
Updated : 2024-12-16 00:15
NVD link : CVE-2024-8587
Mitre link : CVE-2024-8587
CVE.ORG link : CVE-2024-8587
JSON object : View
Products Affected
autodesk
- autocad_electrical
- civil_3d
- autocad
- advance_steel
- autocad_plant_3d
- autocad_mep
- autocad_mechanical
- autocad_architecture