Vulnerabilities > CVE-2021-40157 - Unspecified vulnerability in Autodesk FBX Review 1.4.0/1.4.1.0/1.5.0

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
autodesk
critical

Summary

A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system.

Vulnerable Configurations

Part Description Count
Application
Autodesk
4