Описание
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:autodesk:subassembly_composer:2020:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:subassembly_composer:2021:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:subassembly_composer:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:subassembly_composer:2023:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00046
Низкий
7.8 High
CVSS3
Дефекты
CWE-787
CWE-787
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
EPSS
Процентиль: 14%
0.00046
Низкий
7.8 High
CVSS3
Дефекты
CWE-787
CWE-787