Autodesk Navisworks Vulnerability Allows for Use-After-Free and Execution of Arbitrary Code

CVE-2024-7675

Summary

This vulnerability arises from a flaw in the handling of a maliciously crafted DWF file within the w3dtk.dll component of Autodesk Navisworks. When such a file is parsed, it can trigger a Use-After-Free condition. This issue can be exploited by an attacker to crash the application or potentially execute arbitrary code within the context of the current process. Users and administrators of Autodesk Navisworks should be aware of this vulnerability and implement necessary security measures to mitigate any risks associated with processing DWF files.

References