CVE:CVE-2023-25002
CNNVD:CNNVD-202306-1987
Autodesk Navisworks等都是美国Autodesk公司的产品。Autodesk Navisworks是Autodesk 3ds Max是一款全功能的三维计算机图形软件。Autodesk SKP是一个产品组件。
Autodesk 多款产品存在安全漏洞，该漏洞源于允许攻击者制作恶意SKP文件触发释放后重用漏洞，并导致代码执行。以下产品及版本受到影响：Autodesk 3ds Max,Autodesk SKP,Autodesk Navisworks。
solution:Upgrade autodesk 3ds_max to a higher version than 2022,2023,and avoid the version 2022,2023; Upgrade autodesk navisworks to a higher version than 2022,2023,and avoid the version 2022,2023; Upgrade autodesk revit to a higher version than 2022,2023,and avoid the version 2022,2023; Upgrade autodesk vred to a higher version than 2023,and avoid the version 2023