CVE-2014-2967: OS Command Injection
Published Jul 7, 2014
·Updated
Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server.
Affected Software
1 affected component
Autodesk VRED=2014
Event History
Jul 7, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-2967?
CVE-2014-2967 is rated as high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2014-2967?
To resolve CVE-2014-2967, users should update Autodesk VRED Professional 2014 to the latest service release.
3
What systems are affected by CVE-2014-2967?
CVE-2014-2967 affects Autodesk VRED Professional 2014 prior to SR1 SP8.
4
What type of vulnerability is CVE-2014-2967?
CVE-2014-2967 is a remote code execution vulnerability due to unsafe Python API commands.
5
Can CVE-2014-2967 be exploited remotely?
Yes, CVE-2014-2967 can be exploited remotely by attackers using vulnerable Python os library calls.