critical9.3Public exploit code
CVE-2009-3577
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution2009-10-23 · remote · windows · Verified
Impact
Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | 3ds Max | Versions 6, 7, 8, 9, 2008, 2009 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1023230
- http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution
- http://www.securityfocus.com/archive/1/508012/100/0/threaded
- http://www.securityfocus.com/bid/36634
- http://securitytracker.com/id?1023230
- http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution
- http://www.securityfocus.com/archive/1/508012/100/0/threaded
- http://www.securityfocus.com/bid/36634