ZDI-24-295: Autodesk FBX Review ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-23139.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-295?
ZDI-24-295 has been assigned a CVSS score indicating a high severity due to its ability to allow arbitrary code execution.
How do I fix ZDI-24-295?
The best way to fix ZDI-24-295 is to update Autodesk FBX Review to the latest version that addresses the vulnerability.
Who is affected by ZDI-24-295?
Any users of Autodesk FBX Review are at risk of exploitation from ZDI-24-295 if they interact with malicious files or pages.
What does ZDI-24-295 allow an attacker to do?
ZDI-24-295 allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review.
Is user interaction required for ZDI-24-295 exploitation?
Yes, user interaction is required for ZDI-24-295 exploitation, as the target must visit a malicious page or open a malicious file.