Attack on Autodesk Revit via Maliciously Crafted DLL File

CVE-2024-11454

Summary

A vulnerability exists in Autodesk Revit that allows for the execution of arbitrary code through a maliciously crafted DLL file. When this DLL is placed in the same directory as an RVT file, Autodesk Revit may improperly utilize an untrusted search path. This can lead to code being executed in the context of the current process, posing significant risks to the integrity and security of the user's system. Users are advised to apply the latest updates and follow best practices to safeguard their environments.

References