Description (CNA)
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Autodesk FBX Review | affected 1.4.1.0 |
CWE
No CWE identifiers supplied.
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001
- https://www.zerodayinitiative.com/advisories/ZDI-21-468/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1069/
ADP enrichment
No English description supplied.