CVE-2009-3577: Code Injection

Published Nov 24, 2009

Updated

Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."

Affected Software

7 affected components

Autodesk 3ds Max=7

Autodesk 3ds Max=2008

Autodesk 3ds Max=2010

Autodesk 3ds Max=2009

Autodesk 3ds Max=6

Autodesk 3ds Max=8

Autodesk 3ds Max=9

Event History

Nov 24, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3577?

CVE-2009-3577 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2009-3577?

To fix CVE-2009-3577, users should apply any available software updates or patches from Autodesk.

Who is affected by CVE-2009-3577?

CVE-2009-3577 affects users of Autodesk 3D Studio Max versions 6 through 9 and 2008 through 2010.

How can attackers exploit CVE-2009-3577?

Attackers can exploit CVE-2009-3577 by crafting a malicious .max file that includes a MAXScript statement calling the DOSCommand method.

What types of attacks can be performed using CVE-2009-3577?

Exploitation of CVE-2009-3577 can allow attackers to execute arbitrary commands on the affected system.