CVEvulnerability
CVE-2008-4472
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method.
Affected configurations
• autodesk design review 2009
• autodesk dwf viewer
• autodesk revit architecture 2009
Related
Weakness · not in database (1)
References
- http://images.autodesk.com/adsk/files/live_update_hotfix0.html images.autodesk.com
- http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html retrogod.altervista.org
- http://securityreason.com/securityalert/4361 securityreason.com
- http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366 usa.autodesk.com
- http://www.securityfocus.com/archive/1/496847/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31490 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2704 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45521 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6630 www.exploit-db.com
- http://images.autodesk.com/adsk/files/live_update_hotfix0.html images.autodesk.com
- http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html retrogod.altervista.org
- http://securityreason.com/securityalert/4361 securityreason.com
- http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=12452198&linkID=11705366 usa.autodesk.com
- http://www.securityfocus.com/archive/1/496847/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31490 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2704 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45521 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6630 www.exploit-db.com