Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Autodesk |
|
Configuration 1 [-]
|
No data.
No data.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Tue, 26 Aug 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:*:*:* |
Mon, 10 Feb 2025 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. |
Wed, 29 Jan 2025 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 29 Jan 2025 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Out-of-Bounds Write Vulnerability in Autodesk Desktop Software | DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software |
| References |
|
Tue, 03 Dec 2024 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
Mon, 07 Oct 2024 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025.1:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2025.2:*:*:*:*:*:*:* |
Mon, 30 Sep 2024 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk
Autodesk navisworks |
|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:* | |
| Vendors & Products |
Autodesk
Autodesk navisworks |
|
| Metrics |
ssvc
|
Mon, 30 Sep 2024 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. | |
| Title | Out-of-Bounds Write Vulnerability in Autodesk Desktop Software | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: autodesk
Published:
Updated: 2025-08-26T18:15:39.138Z
Reserved: 2024-08-10T16:13:26.356Z
Link: CVE-2024-7671
Vulnrichment
Updated: 2024-09-30T21:05:17.197Z
NVD
Status : Modified
Published: 2024-09-30T21:15:03.890
Modified: 2025-02-10T21:15:20.890
Link: CVE-2024-7671
Redhat
No data.
OpenCVE Enrichment
No data.