ZDI-CAN-21341: ZDI-24-295: Autodesk FBX Review ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk FBX Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-23139.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21341?
The severity of ZDI-CAN-21341 is determined by its ability to allow remote code execution on affected systems.
How do I fix ZDI-CAN-21341?
To fix ZDI-CAN-21341, update to the latest version of Autodesk FBX Review that addresses this vulnerability.
What types of attacks can be executed using ZDI-CAN-21341?
Using ZDI-CAN-21341, attackers can execute arbitrary code by enticing users to visit a malicious webpage or open a malicious file.
What user actions are required for ZDI-CAN-21341 to be exploited?
User interaction is required for ZDI-CAN-21341 exploitation, as the victim must either visit a malicious page or open a malicious file.
Which software is impacted by ZDI-CAN-21341?
ZDI-CAN-21341 impacts Autodesk FBX Review installations.