CVE-2024-37006: Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37006?
CVE-2024-37006 has a high severity rating due to its potential to enable memory corruption and code execution in Autodesk applications.
How do I fix CVE-2024-37006?
To fix CVE-2024-37006, ensure that you update your Autodesk software to the latest version that includes security patches addressing this vulnerability.
Which Autodesk applications are affected by CVE-2024-37006?
CVE-2024-37006 affects Autodesk AutoCAD 2024 and possibly other Autodesk applications that utilize CC5Dll.dll.
What types of attacks can exploit CVE-2024-37006?
CVE-2024-37006 can be exploited through a maliciously crafted CATPRODUCT file that leads to memory corruption and potential arbitrary code execution.
Is there a workaround for CVE-2024-37006 while waiting for the patch?
Currently, the best approach for CVE-2024-37006 is to avoid opening untrusted CATPRODUCT files until a patch is applied.