ZDI-CAN-20174: ZDI-23-581: Autodesk 3DS Max USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk 3DS Max. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20174?
ZDI-CAN-20174 is considered to have a moderate severity due to the potential for sensitive information disclosure.
How do I fix ZDI-CAN-20174?
To mitigate ZDI-CAN-20174, ensure that users do not visit suspicious websites or open untrusted files.
What software is affected by ZDI-CAN-20174?
ZDI-CAN-20174 affects Autodesk 3DS Max installations.
What is the attack vector for ZDI-CAN-20174?
The attack vector for ZDI-CAN-20174 requires user interaction, such as visiting a malicious page or opening a malicious file.
Can ZDI-CAN-20174 be exploited without user interaction?
No, ZDI-CAN-20174 requires user interaction for exploitation, making it less likely to be exploited through automated attacks.