A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 | Vendor Advisory |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
History
06 May 2025, 19:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 - Vendor Advisory | |
| First Time |
Autodesk autocad Electrical
Autodesk autocad Autodesk Autodesk autocad Mechanical Autodesk civil 3d Autodesk autocad Map 3d Autodesk autocad Architecture Autodesk autocad Mep Autodesk advance Steel Autodesk autocad Plant 3d |
28 Jan 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-863 |
Information
Published : 2024-06-25 03:15
Updated : 2025-05-06 19:45
NVD link : CVE-2024-37002
Mitre link : CVE-2024-37002
CVE.ORG link : CVE-2024-37002
JSON object : View
Products Affected
autodesk
- autocad_map_3d
- autocad_mep
- autocad_plant_3d
- autocad_architecture
- autocad_mechanical
- autocad
- advance_steel
- civil_3d
- autocad_electrical