ZDI-CAN-20168: ZDI-23-577: Autodesk 3DS Max USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published May 12, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Autodesk 3ds Max
Event History
May 12, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20168?
The severity of ZDI-CAN-20168 is high due to the potential for remote attackers to disclose sensitive information.
2
How do I fix ZDI-CAN-20168?
To fix ZDI-CAN-20168, ensure you apply the latest security updates from Autodesk for 3DS Max.
3
What type of attack is enabled by ZDI-CAN-20168?
ZDI-CAN-20168 enables remote code execution through the exploitation of user interaction with malicious content.
4
Is user interaction required for ZDI-CAN-20168 exploitation?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file.
5
Which software is affected by ZDI-CAN-20168?
ZDI-CAN-20168 affects Autodesk 3DS Max installations.