CVE-2024-9500

published 2024-11-15

CVE-2024-9500: A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
autodesk	installer	< 2.10.0.20	2.10.0.20
autodesk	installer	>= 2.10.0.17 < 2.10.0.20	2.10.0.20

CWE-379 CWE-269