ZDI-23-582: Autodesk 3DS Max USD File Parsing Uninitialized Pointer Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-582?
The severity of ZDI-23-582 is considered significant as it allows remote attackers to disclose sensitive information.
How do I fix ZDI-23-582?
To fix ZDI-23-582, ensure that you apply the latest security patches provided by Autodesk for 3DS Max.
What type of attacks are possible with ZDI-23-582?
ZDI-23-582 can lead to remote information disclosure when users interact with malicious pages or files.
Which versions of Autodesk 3DS Max are affected by ZDI-23-582?
All supported versions of Autodesk 3DS Max are potentially affected by ZDI-23-582.
Is user interaction required to exploit ZDI-23-582?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file for the exploit to be successful.