CVE-2024-8591

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8591

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

References
Link Resource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

11 Apr 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'source': '[email protected]'}
  • () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

03 Feb 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'tags': ['Vendor Advisory'], 'source': '[email protected]'}
  • () https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

01 Nov 2024, 16:18

Type Values Removed Values Added
First Time Autodesk
Autodesk autocad Electrical
Autodesk autocad Mep
Microsoft windows
Autodesk autocad Civil 3d
Autodesk autocad Plant 3d
Autodesk autocad
Autodesk autocad Mechanical
Autodesk autocad Advance Steel
Autodesk autocad Architecture
Microsoft
CWE CWE-787
References () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - Vendor Advisory
CPE cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*

01 Nov 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) Un archivo 3DM creado con fines malintencionados, cuando se analiza en AcTranslators.exe a través de Autodesk AutoCAD, puede provocar una vulnerabilidad de desbordamiento de búfer de almacenamiento dinámico. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, escribir datos confidenciales o ejecutar código arbitrario en el contexto del proceso actual.

29 Oct 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-29 22:15

Updated : 2025-04-11 17:15

NVD link : CVE-2024-8591

Mitre link : CVE-2024-8591

CVE.ORG link : CVE-2024-8591

JSON object : View

Products Affected

autodesk

microsoft

CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write