PT-2021-17237
CVE-2021-27028
·
Published
2021-04-19
·
Updated
2021-09-16
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Autodesk FBX Review versions 1.5.0 and prior
Autodesk FBX Review version 1.4.0
Description:
A memory corruption issue may lead to remote code execution through maliciously crafted DLL files. This issue is related to the parsing of FBX files.
Recommendations:
For Autodesk FBX Review versions 1.5.0 and prior, update to a version later than 1.5.0 to resolve the issue.
For Autodesk FBX Review version 1.4.0, update to a version later than 1.4.0 to resolve the issue.
As a temporary workaround, consider restricting the use of maliciously crafted DLL files until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾