PT-2021-22824

CVE-2021-40157

·

Published

2021-09-15

·

Updated

2022-06-16

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Autodesk FBX Review versions 1.5.0 and prior
Description A user may be tricked into opening a malicious FBX file, which may exploit an Untrusted Pointer Dereference issue in FBX’s Review, causing it to run arbitrary code on the system.
Recommendations For versions 1.5.0 and prior, avoid opening malicious FBX files until a patch is available. As a temporary workaround, consider restricting the use of FBX file parsing functionality to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-21-1068
Found an issue in the description? Have something to add? Feel free to write us 👾