A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
| Type | CWE ID | Description |
|---|---|---|
| CWE | CWE-121 | CWE-121: Stack-based Buffer Overflow |
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 3.1 | 7.8 | HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CAPEC ID | Description |
|---|---|
| CAPEC-100 | CAPEC-100 Overflow Buffers |
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0006 | N/A |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0006 | x_transferred |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|