Browse CVEs

HIGH 7.8 CVE-2019-7360 An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD … Advance Steel Mitigation only Fix from $1,9502019-04-09 HIGH 7.8 CVE-2019-7361 An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autod… Advance Steel Mitigation only Fix from $1,9502019-04-09 MEDIUM 6.8 CVE-2015-8572 Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data … Design Review Mitigation only Fix from $1,6002015-12-15 MEDIUM 6.8 CVE-2015-8571 Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value… Design Review Mitigation only Fix from $1,6002015-12-15 HIGH 10.0 CVE-2014-2967EPSS 5% Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands t… Vred Mitigation only Fix from $1,9502014-07-07 MEDIUM 6.9 CVE-2010-5241 Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2)… Autocad Mitigation only Fix from $1,6002012-09-07 MEDIUM 6.9 CVE-2010-5226 Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse (1) d… Design Review 2011 Mitigation only Fix from $1,6002012-09-07 HIGH 9.3 CVE-2009-3576 Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table… Autodesk Softimage No fix yet Fix from $1,9502009-11-24 HIGH 9.3 CVE-2009-3577EPSS 5% Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript … 3ds Max No fix yet Fix from $1,9502009-11-24 HIGH 9.3 CVE-2009-3578 Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (… Alias Wavefront Maya Mitigation only Fix from $1,9502009-11-24 HIGH 9.3 CVE-2008-4471EPSS 7% Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Archit… Design Review No fix yet Fix from $1,9502008-10-07 HIGH 9.3 CVE-2008-4472EPSS 8% The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Revie… Design Review No fix yet Fix from $1,9502008-10-07 MEDIUM 6.8 CVE-2007-4749 The cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain… Backburner Mitigation only Fix from $1,6002007-09-14