Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rxxm-q32v-2mc5

Опубликовано: 22 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A maliciously crafted STP file when ASMKERN228A.dll parsed through Autodesk AutoCAD can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

A maliciously crafted STP file when ASMKERN228A.dll parsed through Autodesk AutoCAD can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

EPSS

Процентиль: 55%
0.00319
Низкий

7.5 High

CVSS3

Дефекты

CWE-822

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

EPSS

Процентиль: 55%
0.00319
Низкий

7.5 High

CVSS3

Дефекты

CWE-822