WID-SEC-W-2023-0826

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Autodesk FBX SDK: Mehrere Schwachstellen

view advisory published 2023-04-02

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk FBX SDK ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Dateien zu manipulieren.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-27911UShigh7.8—
A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27910UShigh7.8—
A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.
CVE-2023-27909UShigh7.8—
An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or information disclosure.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan