CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-12179

Medium Severity
SVRS
30/100

CVSSv3
NA/10

EPSS
0.00021/1

CVE-2024-12179 is a heap-based overflow vulnerability in Autodesk Navisworks. Parsing a maliciously crafted DWFX file can trigger this vulnerability, potentially allowing an attacker to cause a crash, read sensitive data, or execute arbitrary code. With an SVRS of 30, while not immediately critical, this CVE requires monitoring. Successful exploitation could lead to significant data breaches and system compromise. This vulnerability highlights the risks associated with processing untrusted files and the importance of keeping software updated. Although the CVSS score is 0, the potential for arbitrary code execution makes CVE-2024-12179 a serious concern for organizations using Autodesk Navisworks. Autodesk Navisworks users should apply available patches to mitigate this risk.

In The Wild
2024-12-17

2025-01-29

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-12179 | Autodesk Navisworks Freedom 2025 DWFX File heap-based overflow
vuldb.com2025-02-17
CVE-2024-12179 | Autodesk Navisworks Freedom 2025 DWFX File heap-based overflow | A vulnerability was found in Autodesk Navisworks Freedom, Navisworks Simulate and Navisworks Manage 2025. It has been rated as critical. Affected by this issue is some unknown functionality of the component DWFX File Handler. The manipulation leads to heap-based buffer overflow. This vulnerability is handled as CVE-2024-12179. The attack
vuldb.com
rss
forum
news
ZDI-24-1707: Autodesk Navisworks Freedom DWFX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-12-19
ZDI-24-1707: Autodesk Navisworks Freedom DWFX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-12179.
zerodayinitiative.com
rss
forum
news

Social Media

CVE-2024-12179 Heap-based Overflow Vulnerability in Autodesk Navisworks via DWFX File Parsing A Heap-based Overflow vulnerability can happen with a malicious DWFX file when used in Autodesk Navisworks. This vulne... https://t.co/WJ6g33RpPw
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://autodesk.com/trust/security-advisories/adsk-sa-2024-0027
[email protected]https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
GITHUBhttps://autodesk.com/trust/security-advisories/adsk-sa-2024-0027

CWE Details

CWE IDCWE NameDescription
CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence