CVE-2009-3578: Code Injection

Published Nov 24, 2009

Updated

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."

Affected Software

8 affected components

Autodesk Autodesk Maya=8.5-2008

Autodesk Autodesk Maya=8.0-2010

Autodesk Autodesk Maya=8.0-2009

Autodesk Autodesk Maya=8.5-2009

Autodesk Autodesk Maya=8.5-2010

Autodesk Autodesk Maya=8.0-2008

Autodesk Alias Wavefront Maya=7.0

Autodesk Alias Wavefront Maya=6.5

Event History

Nov 24, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3578?

CVE-2009-3578 is classified as a high-severity vulnerability allowing remote code execution.

How do I fix CVE-2009-3578?

To fix CVE-2009-3578, update Autodesk Maya and Alias Wavefront Maya to the latest versions provided by the vendor.

Which versions are affected by CVE-2009-3578?

CVE-2009-3578 affects Autodesk Maya versions 6.5, 7.0, 8.0 (2008, 2009, 2010), and 8.5 (2008, 2009, 2010).

What type of attack is associated with CVE-2009-3578?

CVE-2009-3578 is associated with remote code execution through malicious .ma or .mb files.

What vulnerabilities does CVE-2009-3578 utilize?

CVE-2009-3578 utilizes vulnerabilities in the Maya Embedded Language (MEL) and relating to "Script Nodes."