Описание
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."
Ссылки
- Exploit
- Exploit
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:autodesk:3ds_max:6:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:7:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:8:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:9:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:2008:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:2009:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:3ds_max:2010:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03965
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
почти 4 года назад
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."
EPSS
Процентиль: 88%
0.03965
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-94