CVE-2024-7670 - OpenCVE

A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Autodesk	Navisworks

Configuration 1 [-]

OR	cpe:2.3:a:autodesk:navisworks:2025:::::::*
	cpe:2.3:a:autodesk:navisworks:2025.1:::::::*
	cpe:2.3:a:autodesk:navisworks:2025.2:::::::*

No data.

References

Link	Providers
https://autodesk.com/trust/security-advisories/adsk-sa-2024-0015

History

Mon, 07 Oct 2024 19:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:autodesk:navisworks:2025.1:::::::* cpe:2.3:a:autodesk:navisworks:2025.2:::::::*

Mon, 30 Sep 2024 21:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Autodesk Autodesk navisworks
CPEs		cpe:2.3:a:autodesk:navisworks:2025:::::::*
Vendors & Products		Autodesk Autodesk navisworks
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 30 Sep 2024 20:45:00 +0000

Type	Values Removed	Values Added
Description		A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Title		Out-of-Bounds Read Vulnerability in Autodesk Desktop Software
Weaknesses		CWE-125
References		https://autodesk.com/trust/security-advisories/adsk-sa-2024-0015
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2024-09-30T20:25:32.777Z

Updated: 2024-11-07T06:05:47.593Z

Reserved: 2024-08-10T16:13:22.403Z

Link: CVE-2024-7670

Vulnrichment

Updated: 2024-09-30T21:05:18.466Z

NVD

Status : Analyzed

Published: 2024-09-30T21:15:03.680

Modified: 2024-10-07T18:43:46.983

Link: CVE-2024-7670

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7670", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2024-08-10T16:13:22.403Z", "datePublished": "2024-09-30T20:25:32.777Z", "dateUpdated": "2024-11-07T06:05:47.593Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Navisworks Freedom", "vendor": "Autodesk", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}]}, {"defaultStatus": "unaffected", "product": "Navisworks Simulate", "vendor": "Autodesk", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}]}, {"defaultStatus": "unaffected", "product": "Navisworks Manage", "vendor": "Autodesk", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted </span><span style=\"background-color: rgb(255, 255, 255);\">DWF</span><span style=\"background-color: rgb(255, 255, 255);\">X</span><span style=\"background-color: rgb(255, 255, 255);\"> f</span><span style=\"background-color: rgb(255, 255, 255);\">ile,</span><span style=\"background-color: rgb(255, 255, 255);\"> when pars</span><span style=\"background-color: rgb(255, 255, 255);\">ed</span> <span style=\"background-color: rgb(255, 255, 255);\">in </span><span style=\"background-color: rgb(255, 255, 255);\">w3dtk.dll </span><span style=\"background-color: rgb(255, 255, 255);\">th</span><span style=\"background-color: rgb(255, 255, 255);\">rough Autodesk </span><span style=\"background-color: rgb(255, 255, 255);\">Navisworks</span><span style=\"background-color: rgb(255, 255, 255);\">,</span><span style=\"background-color: rgb(255, 255, 255);\"> can force an Out-of-Bound</span><span style=\"background-color: rgb(255, 255, 255);\">s</span> <span style=\"background-color: rgb(255, 255, 255);\">R</span><span style=\"background-color: rgb(255, 255, 255);\">e</span><span style=\"background-color: rgb(255, 255, 255);\">ad</span><span style=\"background-color: rgb(255, 255, 255);\">. A malicious actor can</span> <span style=\"background-color: rgb(255, 255, 255);\">leverag</span><span style=\"background-color: rgb(255, 255, 255);\">e</span><span style=\"background-color: rgb(255, 255, 255);\"> this vulnerability to cause a crash, </span><span style=\"background-color: rgb(255, 255, 255);\">read</span><span style=\"background-color: rgb(255, 255, 255);\"> sensitive data, or execute arbitrary code in the context of the current process. </span><br>"}], "value": "A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2024-11-07T06:05:47.593Z"}, "references": [{"url": "https://autodesk.com/trust/security-advisories/adsk-sa-2024-0015"}], "source": {"discovery": "UNKNOWN"}, "title": "Out-of-Bounds Read Vulnerability in Autodesk Desktop Software", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "autodesk", "product": "navisworks", "cpes": ["cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2025", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-30T21:01:17.882957Z", "id": "CVE-2024-7670", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-30T21:06:34.116Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7670", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-30T21:01:17.882957Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:*"], "vendor": "autodesk", "product": "navisworks", "versions": [{"status": "affected", "version": "2025"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-30T21:05:18.466Z"}}], "cna": {"title": "Out-of-Bounds Read Vulnerability in Autodesk Desktop Software", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Autodesk", "product": "Navisworks Freedom", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}], "defaultStatus": "unaffected"}, {"vendor": "Autodesk", "product": "Navisworks Simulate", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}], "defaultStatus": "unaffected"}, {"vendor": "Autodesk", "product": "Navisworks Manage", "versions": [{"status": "affected", "version": "2025"}, {"status": "affected", "version": "2024"}, {"status": "affected", "version": "2023"}, {"status": "affected", "version": "2022"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://autodesk.com/trust/security-advisories/adsk-sa-2024-0015"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A maliciously crafted </span><span style=\"background-color: rgb(255, 255, 255);\">DWF</span><span style=\"background-color: rgb(255, 255, 255);\">X</span><span style=\"background-color: rgb(255, 255, 255);\"> f</span><span style=\"background-color: rgb(255, 255, 255);\">ile,</span><span style=\"background-color: rgb(255, 255, 255);\"> when pars</span><span style=\"background-color: rgb(255, 255, 255);\">ed</span> <span style=\"background-color: rgb(255, 255, 255);\">in </span><span style=\"background-color: rgb(255, 255, 255);\">w3dtk.dll </span><span style=\"background-color: rgb(255, 255, 255);\">th</span><span style=\"background-color: rgb(255, 255, 255);\">rough Autodesk </span><span style=\"background-color: rgb(255, 255, 255);\">Navisworks</span><span style=\"background-color: rgb(255, 255, 255);\">,</span><span style=\"background-color: rgb(255, 255, 255);\"> can force an Out-of-Bound</span><span style=\"background-color: rgb(255, 255, 255);\">s</span> <span style=\"background-color: rgb(255, 255, 255);\">R</span><span style=\"background-color: rgb(255, 255, 255);\">e</span><span style=\"background-color: rgb(255, 255, 255);\">ad</span><span style=\"background-color: rgb(255, 255, 255);\">. A malicious actor can</span> <span style=\"background-color: rgb(255, 255, 255);\">leverag</span><span style=\"background-color: rgb(255, 255, 255);\">e</span><span style=\"background-color: rgb(255, 255, 255);\"> this vulnerability to cause a crash, </span><span style=\"background-color: rgb(255, 255, 255);\">read</span><span style=\"background-color: rgb(255, 255, 255);\"> sensitive data, or execute arbitrary code in the context of the current process. </span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2024-11-07T06:05:47.593Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7670", "state": "PUBLISHED", "dateUpdated": "2024-11-07T06:05:47.593Z", "dateReserved": "2024-08-10T16:13:22.403Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2024-09-30T20:25:32.777Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:*", "matchCriteriaId": "39C7EACE-BA48-45C3-BF80-F1DB7C6E271D", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:navisworks:2025.1:*:*:*:*:*:*:*", "matchCriteriaId": "A699B5C0-F155-41D7-B204-F7128F24A33B", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:navisworks:2025.2:*:*:*:*:*:*:*", "matchCriteriaId": "08FC6D85-8BE7-46D3-B1F8-1B06CA18DB38", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo DWFX manipulado con fines malintencionados, cuando se analiza en w3dtk.dll a trav\u00e9s de Autodesk Navisworks, puede forzar una lectura fuera de los l\u00edmites. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, leer datos confidenciales o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "id": "CVE-2024-7670", "lastModified": "2024-10-07T18:43:46.983", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}]}, "published": "2024-09-30T21:15:03.680", "references": [{"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://autodesk.com/trust/security-advisories/adsk-sa-2024-0015"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}