CVE-2024-7670 in Navisworks Freedom
Riassunto
di MITRE • 01/10/2024
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.