Autodesk 3DS Max code execution
Published:		26.11.2009
Source:		BUGTRAQ
SecurityVulns ID:		10422
Type:		local
Level:		2/10
Description:		It's possible to embed code into .max files.

Affected:		AUTODESK : 3DS Max 2010
		AUTODESK : 3DS Max 2009
		AUTODESK : 3DS Max 2008
CVE:		CVE-2009-3577 (Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks.")

Original document

CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2009-0909: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution (26.11.2009)

Discuss:

Read or add your comments to this news (0 comments)