Vulnerabilities > CVE-2014-3938 - Numeric Errors vulnerability in Autodesk Sketchbook PRO 6.2.4/6.2.5

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
autodesk
CWE-189
critical
nessus

Summary

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow.

Vulnerable Configurations

Part Description Count
Application
Autodesk
2

Common Weakness Enumeration (CWE)

Nessus

  • NASL familyWindows
    NASL idAUTODESK_SKETCHBOOK_PRO_CVE-2014-3938.NASL
    descriptionThe version of Autodesk SketchBook Pro installed on the remote host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code.
    last seen2020-06-01
    modified2020-06-02
    plugin id77370
    published2014-08-25
    reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/77370
    titleAutodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(77370);
      script_version("1.2");
      script_cvs_date("Date: 2018/06/27 18:42:27");
    
      script_cve_id("CVE-2014-3938", "CVE-2014-3939");
      script_bugtraq_id(68887);
    
      script_name(english:"Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities");
      script_summary(english:"Checks the Autodesk SketchBook Pro version.");
    
      script_set_attribute(attribute:"synopsis", value:
    "The remote host has a graphics editing application installed that is
    affected by multiple overflow vulnerabilities.");
      script_set_attribute(attribute:"description", value:
    "The version of Autodesk SketchBook Pro installed on the remote host is
    prior to 6.2.6. It is, therefore, affected by integer and heap-based
    buffer overflow vulnerabilities. Using a specially crafted PSD or PXD
    file, an attacker could cause a denial of service or execute arbitrary
    code.");
      # http://blog.sketchbook.com/news/important-security-update-for-sketchbook.html
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?63a1d7df");
      script_set_attribute(attribute:"solution", value:"Upgrade to SketchBook Pro 6.2.6 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2014/07/18");
      script_set_attribute(attribute:"patch_publication_date", value:"2014/07/08");
      script_set_attribute(attribute:"plugin_publication_date", value:"2014/08/25");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:autodesk:sketchbook");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:autodesk:sketchbook_pro");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Windows");
    
      script_copyright(english:"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.");
    
      script_dependencies("autodesk_sketchbook_pro_installed.nbin");
      script_require_keys("SMB/Registry/Enumerated", "installed_sw/Autodesk SketchBook");
    
      exit(0);
    }
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("install_func.inc");
    
    get_kb_item_or_exit("SMB/Registry/Enumerated");
    
    appname = 'Autodesk SketchBook';
    get_install_count(app_name:appname, exit_if_zero:TRUE);
    
    install = get_single_install(app_name:appname);
    version = install["version"];
    path    = install["path"];
    edition = install["edition"];
    
    port = get_kb_item("SMB/transport");
    if (!port) port = 445;
    
    # Only know that Pro is affected so far
    fix = '6.2.6';
    if (
      edition == "Pro"  &&
      version =~ "^6\." &&
      ver_compare(ver:version,fix:fix,strict:FALSE) < 0
    )
    {
      report =
        '\n  Product           : ' + appname + " " + edition +
        '\n  Path              : ' + path +
        '\n  Installed version : ' + version+
        '\n  Fixed version     : ' + fix + '\n';
    } else audit(AUDIT_INST_PATH_NOT_VULN, appname, version, path);
    
    if (report_verbosity > 0) security_hole(port:port, extra:report);
    else security_hole(port);
    
  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_AUTODESK_SKETCHBOOK_PRO_CVE-2014-3938.NASL
    descriptionThe version of Autodesk SketchBook Pro installed on the remote Mac OS X host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code.
    last seen2020-06-01
    modified2020-06-02
    plugin id77372
    published2014-08-25
    reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/77372
    titleAutodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(77372);
      script_version("1.2");
      script_cvs_date("Date: 2018/07/14  1:59:36");
    
      script_cve_id("CVE-2014-3938","CVE-2014-3939");
      script_bugtraq_id(68887);
    
      script_name(english:"Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities");
      script_summary(english:"Checks the Autodesk SketchBook Pro version.");
    
      script_set_attribute(attribute:"synopsis", value:
    "The remote host has a graphics editing application installed that is
    affected by multiple overflow vulnerabilities.");
      script_set_attribute(attribute:"description", value:
    "The version of Autodesk SketchBook Pro installed on the remote Mac OS
    X host is prior to 6.2.6. It is, therefore, affected by integer and
    heap-based buffer overflow vulnerabilities. Using a specially crafted
    PSD or PXD file, an attacker could cause a denial of service or
    execute arbitrary code.");
      # http://blog.sketchbook.com/news/important-security-update-for-sketchbook.html
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?63a1d7df");
      script_set_attribute(attribute:"solution", value:"Upgrade to SketchBook Pro 6.2.6 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2014/07/18");
      script_set_attribute(attribute:"patch_publication_date", value:"2014/07/08");
      script_set_attribute(attribute:"plugin_publication_date", value:"2014/08/25");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:autodesk:sketchbook");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:autodesk:sketchbook_pro");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"MacOS X Local Security Checks");
    
      script_copyright(english:"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.");
    
      script_dependencies("macosx_autodesk_sketchbook_pro_installed.nbin");
      script_require_keys("Host/local_checks_enabled", "Host/MacOSX/Version","installed_sw/Autodesk SketchBook");
    
      exit(0);
    }
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("install_func.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/MacOSX/Version")) audit(AUDIT_OS_NOT, "Mac OS X");
    
    appname = 'Autodesk SketchBook';
    get_install_count(app_name:appname, exit_if_zero:TRUE);
    
    install = get_single_install(app_name:appname,exit_if_unknown_ver:TRUE);
    version = install["version"];
    path    = install["path"];
    edition = install["edition"];
    
    # Only pro known to be affected
    fix = '6.2.6';
    if (
      edition == "Pro"  &&
      version =~ "^6\." &&
      ver_compare(ver:version,fix:fix,strict:FALSE) < 0
    )
    {
      report =
        '\n  Product           : ' + appname + " " + Pro +
        '\n  Path              : ' + path +
        '\n  Installed version : ' + version+
        '\n  Fixed version     : ' + fix + '\n';
    } else audit(AUDIT_INST_PATH_NOT_VULN, appname, version, path);
    
    if (report_verbosity > 0) security_hole(port:0, extra:report);
    else security_hole(0);