CVE-2024-37000 - Vulnerability Details - OpenCVE

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Autodesk	Advance Steel Autocad Civil 3d

No data.

No data.

References

Link	Providers
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009

History

Mon, 27 Jan 2025 21:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Autodesk Autodesk advance Steel Autodesk autocad Autodesk civil 3d
CPEs		cpe:2.3:a:autodesk:advance_steel:2024:::::::* cpe:2.3:a:autodesk:autocad:2024:::::::* cpe:2.3:a:autodesk:civil_3d:2024:::::::*
Vendors & Products		Autodesk Autodesk advance Steel Autodesk autocad Autodesk civil 3d
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 27 Jan 2025 21:00:00 +0000

Type	Values Removed	Values Added
Title		Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Metrics	cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2024-06-25T03:01:53.604Z

Updated: 2025-01-28T17:16:03.323Z

Reserved: 2024-05-30T20:11:46.549Z

Link: CVE-2024-37000

Vulnrichment

Updated: 2024-08-02T03:43:50.657Z

NVD

Status : Awaiting Analysis

Published: 2024-06-25T03:15:10.463

Modified: 2025-01-27T21:15:12.133

Link: CVE-2024-37000

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-37000", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2024-05-30T20:11:46.549Z", "datePublished": "2024-06-25T03:01:53.604Z", "dateUpdated": "2025-01-28T17:16:03.323Z"}, "containers": {"cna": {"affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Architecture", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Electrical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Mechanical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MEP", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Plant 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Civil 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Advance Steel", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MAP 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1", "status": "affected", "version": "2025", "versionType": "custom"}, {"lessThan": "2024.1.4", "status": "affected", "version": "2024", "versionType": "custom"}, {"lessThan": "2023.1.6", "status": "affected", "version": "2023", "versionType": "custom"}, {"lessThan": "2022.1.5", "status": "affected", "version": "2022", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.</span><br>"}], "value": "A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-119", "description": "CWE-119 Memory Corruption - Generic", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-01-28T17:16:03.323Z"}, "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "source": {"discovery": "EXTERNAL"}, "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "autodesk", "product": "autocad", "cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "advance_steel", "cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}, {"vendor": "autodesk", "product": "civil_3d", "cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2024", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-06-25T13:23:33.352025Z", "id": "CVE-2024-37000", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:23:40.959Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:50.657Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:50.657Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-37000", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-25T13:23:33.352025Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "autocad", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "advance_steel", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "civil_3d", "versions": [{"status": "affected", "version": "2024"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-25T13:23:18.324Z"}}], "cna": {"title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Architecture", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Electrical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Mechanical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MEP", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Plant 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Civil 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Advance Steel", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MAP 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1", "versionType": "custom"}, {"status": "affected", "version": "2024", "lessThan": "2024.1.4", "versionType": "custom"}, {"status": "affected", "version": "2023", "lessThan": "2023.1.6", "versionType": "custom"}, {"status": "affected", "version": "2022", "lessThan": "2022.1.5", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-119", "description": "CWE-119 Memory Corruption - Generic"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-01-28T17:16:03.323Z"}}}, "cveMetadata": {"cveId": "CVE-2024-37000", "state": "PUBLISHED", "dateUpdated": "2025-01-28T17:16:03.323Z", "dateReserved": "2024-05-30T20:11:46.549Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2024-06-25T03:01:53.604Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process."}, {"lang": "es", "value": "Un archivo X_B creado con fines malintencionados, cuando se analiza en pskernel.DLL a trav\u00e9s de aplicaciones de Autodesk, puede provocar una vulnerabilidad de corrupci\u00f3n de memoria por infracci\u00f3n de acceso de escritura. Esta vulnerabilidad, junto con otras vulnerabilidades, puede provocar la ejecuci\u00f3n de c\u00f3digo en el contexto del proceso actual."}], "id": "CVE-2024-37000", "lastModified": "2025-01-27T21:15:12.133", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-25T03:15:10.463", "references": [{"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}