Browse CVEs

HIGH 7.8 CVE-2019-7365 DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a user into downloading a maliciou… Autodesk Desktop after 7.0.16.29 Fix from $1,9502019-12-03 HIGH 7.8 CVE-2019-7366 Buffer overflow vulnerability in Autodesk FBX Software Development Kit version 2019.5. A user may be tricked into opening a malicious FBX file which … Fbx Software Development Kit Patch available Fix from $1,9502019-12-03 HIGH 7.8 CVE-2019-7362 DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF… Design Review Patch available Fix from $1,9502019-08-23 HIGH 7.8 CVE-2019-7363 Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF… Design Review Patch available Fix from $1,9502019-08-23 HIGH 7.8 CVE-2019-7364 DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, … Advance Steel Patch available Fix from $1,9502019-08-23 HIGH 7.8 CVE-2019-7358 An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD A… Advance Steel Mitigation only Fix from $1,9502019-04-09 HIGH 7.8 CVE-2019-7359 An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD … Advance Steel Mitigation only Fix from $1,9502019-04-09 HIGH 7.8 CVE-2019-7360 An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD … Advance Steel Mitigation only Fix from $1,9502019-04-09 HIGH 7.8 CVE-2019-7361 An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autod… Advance Steel Mitigation only Fix from $1,9502019-04-09 CRITICAL 9.8 CVE-2016-9303 Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop condition whe… Fbx Software Development Kit after 2017.0 Fix from $2,3002017-01-25 CRITICAL 9.8 CVE-2016-9305 Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting malformed… Fbx Software Development Kit after 2017.0 Fix from $2,3002017-01-25 CRITICAL 9.8 CVE-2016-9306 Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DA… Fbx Software Development Kit after 2017.0 Fix from $2,3002017-01-25 CRITICAL 9.8 CVE-2016-9307 Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed 3D… Fbx Software Development Kit after 2017.0 Fix from $2,3002017-01-25 HIGH 8.8 CVE-2016-9304 Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting malformed DF… Fbx Software Development Kit after 2017.0 Fix from $1,9502017-01-25 HIGH 7.5 CVE-2016-2344 Stack-based buffer overflow in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016.0.0.2150 and earlier allows remote attackers to exe… Autodesk Backburner after 2016.0.0.2150 Fix from $1,9502016-03-28 MEDIUM 6.8 CVE-2015-8572 Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data … Design Review Mitigation only Fix from $1,6002015-12-15 MEDIUM 6.8 CVE-2015-8571 Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value… Design Review Mitigation only Fix from $1,6002015-12-15 MEDIUM 6.8 CVE-2014-9268 The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a cr… Design Review after 2013 Fix from $1,6002014-12-08 HIGH 9.3 CVE-2014-3939EPSS 6% Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in… Sketchbook Pro after 6.2.5 Fix from $1,9502014-07-23 HIGH 9.3 CVE-2014-3938 Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file,… Sketchbook Pro after 6.2.5 Fix from $1,9502014-07-23 HIGH 10.0 CVE-2014-2967EPSS 5% Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands t… Vred Mitigation only Fix from $1,9502014-07-07 HIGH 9.3 CVE-2013-5365EPSS 5% Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote att… Sketchbook after 6.2.4 Fix from $1,9502014-04-02 HIGH 7.5 CVE-2014-0818 Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a T… Autocad after 2013 Fix from $1,9502014-02-22 MEDIUM 6.8 CVE-2013-3665 Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute… Autocad Patch available Fix from $1,6002013-07-18 MEDIUM 6.9 CVE-2010-5241 Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2)… Autocad Mitigation only Fix from $1,6002012-09-07 MEDIUM 6.9 CVE-2010-5226 Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse (1) d… Design Review 2011 Mitigation only Fix from $1,6002012-09-07 HIGH 9.3 CVE-2009-3576 Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table… Autodesk Softimage No fix yet Fix from $1,9502009-11-24 HIGH 9.3 CVE-2009-3577EPSS 5% Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript … 3ds Max No fix yet Fix from $1,9502009-11-24 HIGH 9.3 CVE-2009-3578 Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (… Alias Wavefront Maya Mitigation only Fix from $1,9502009-11-24 HIGH 9.3 CVE-2008-4471EPSS 7% Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Archit… Design Review No fix yet Fix from $1,9502008-10-07