Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."
Search vulnerabilities
CVE-2009-3578
CVSS 2.0 · 9.3 Critical
EPSS 4.4%
KEV · Not listed
Vendors
Products
CVE-2023-25003
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-29068
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-25004
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.