Remote Code Execution Vulnerability in Autodesk LiveUpdate Control
CVE-2008-4472

Currently unrated

Key Information:

Vendor: Autodesk
Status: Design Review; Revit Architecture; Dwf Viewer
Vendor: CVE Published:; 7 October 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 11%

What is CVE-2008-4472?

The UpdateEngine class in the LiveUpdate ActiveX control, specifically in LiveUpdate16.DLL version 17.2.56, poses a risk by allowing remote attackers to execute arbitrary programs. This is accomplished through the manipulation of the second argument in the ApplyPatch method, affecting popular Autodesk products such as Revit Architecture 2009 SP2 and Autodesk Design Review 2009.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-4472 - Proof of Concept