Lucene search
HistoryJun 25, 2024 - 4:15 a.m.
CVE-2024-23159
craft file autodesk
code execution
stp vulnerability
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
28.9%
A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.
Related
cvelist
cvelist
CVE-2024-23159
2024-06-25 03:33:00
vulnrichment
vulnrichment
CVE-2024-23159
2024-06-25 03:33:00
cve
cve
CVE-2024-23159
2024-06-25 04:15:14
zdi
zdi
nessus
nessus
Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0010)
2024-06-28 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
28.9%
Related for NVD:CVE-2024-23159