Inventor ODXSW_DLL Unexpected GLB Mem Corruption via Malicious SolidWorks File
CVE-2024-23157 Published on June 25, 2024

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.

NVD

Vulnerability Analysis

CVE-2024-23157 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2024-23157 has been classified to as a Buffer Overflow vulnerability or weakness.


Products Associated with CVE-2024-23157

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2024-23157 are published in these products:

AutoDesk Autocad
 
AutoDesk Autocad Architecture
 
AutoDesk Autocad Electrical
 
AutoDesk Autocad Map 3d
 
AutoDesk Autocad Mechanical
 
AutoDesk Autocad Mep
 
AutoDesk Autocad Plant 3d
 
AutoDesk Civil 3d
 
AutoDesk Advance Steel
 

Affected Versions

Autodesk AutoCAD: Autodesk AutoCAD Architecture: Autodesk AutoCAD Electrical: Autodesk AutoCAD Mechanical: Autodesk AutoCAD MEP: Autodesk AutoCAD Plant 3D: Autodesk Civil 3D: Autodesk Advance Steel: Autodesk AutoCAD MAP 3D: autodesk autocad: autodesk advance_steel: autodesk civil_3d: autodesk autocad_architecture: autodesk autocad_electrical: autodesk autocad_map_3d: autodesk autocad_mechanical: autodesk autocad_mep: autodesk autocad_plant_3d:

Exploit Probability

EPSS
0.61%
Percentile
69.01%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.