2 lines
2.8 KiB
JSON
2 lines
2.8 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:autodesk:3ds_max:2026:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"3ds Max","vendor":"Autodesk","versions":[{"lessThan":"2026.3.2","status":"affected","version":"2026","versionType":"custom"}]}],"source":"psirt@autodesk.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*","matchCriteriaId":"CF0B2FEF-FF28-4FF2-91CF-B417FB77CF04","versionEndExcluding":"2026.3.2","versionStartIncluding":"2026","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process."},{"lang":"es","value":"Un archivo RGB creado maliciosamente, al ser procesado por Autodesk 3ds Max, puede forzar una vulnerabilidad de corrupción de memoria. Un actor malicioso puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto del proceso actual."}],"id":"CVE-2026-0537","lastModified":"2026-06-17T10:10:54.447","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":5.9,"source":"psirt@autodesk.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":5.9,"source":"nvd@nist.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0537","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-02-06T04:55:23.158110Z","version":"2.0.3"}}]},"published":"2026-02-04T17:16:12.237","references":[{"source":"psirt@autodesk.com","tags":["Product"],"url":"https://www.autodesk.com/products/autodesk-access/overview"},{"source":"psirt@autodesk.com","tags":["Vendor Advisory"],"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002"}],"sourceIdentifier":"psirt@autodesk.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"psirt@autodesk.com","type":"Secondary"}]}
|