CVE-2024-37002: Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37002?
CVE-2024-37002 has been classified as a critical vulnerability due to its potential to allow code execution.
How do I fix CVE-2024-37002?
To fix CVE-2024-37002, update your Autodesk AutoCAD 2024 to the latest version provided by Autodesk.
What applications are affected by CVE-2024-37002?
CVE-2024-37002 specifically affects Autodesk AutoCAD 2024 when using the ASMkern229A.dll library.
What type of exploitation is possible with CVE-2024-37002?
CVE-2024-37002 can be exploited to execute arbitrary code by leveraging uninitialized variables in a maliciously crafted MODEL file.
Are there any workarounds for CVE-2024-37002?
As of now, there are no known workarounds for CVE-2024-37002, and updating the software is the recommended course of action.