ZDI-CAN-22587: ZDI-24-296: Autodesk DWG TrueView DWG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk DWG TrueView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-23138.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22587?
ZDI-CAN-22587 has a high severity rating, indicating significant risk to affected systems.
How do I fix ZDI-CAN-22587?
To mitigate ZDI-CAN-22587, users should update Autodesk DWG TrueView to the latest version provided by Autodesk.
What types of attacks are possible with ZDI-CAN-22587?
ZDI-CAN-22587 allows remote code execution, which enables attackers to run arbitrary code on a victim's system.
Is user interaction required to exploit ZDI-CAN-22587?
Yes, user interaction is necessary, as the target must either visit a malicious page or open a malicious file.
Which software is affected by ZDI-CAN-22587?
ZDI-CAN-22587 affects installations of Autodesk DWG TrueView, specifically version 2022.