high7.8
CVE-2023-29069
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs.
Impact
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Desktop Connector | through 16.2.1.2016 |