CVE-2008-4472 in Dwf Viewer
Summary
The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/07/2008
Disclosure
10/07/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 44378 | Autodesk Dwf Viewer ActiveX Control LiveUpdate16.DLL access control | 264 | Proof-of-Concept | Not defined | CVE-2008-4472 |