Insecure Privilege Management in Autodesk Installer Could Lead to Escalation of Privileges

CVE-2024-9500

What is CVE-2024-9500?

A vulnerability exists in Autodesk products where a maliciously crafted Dynamic Link Library (DLL) file can be placed in the temporary directories utilized by the Autodesk Installer. This scenario may allow an attacker to gain escalated privileges to the NT AUTHORITY/SYSTEM level, which can lead to severe security implications for affected systems. This vulnerability arises from improper management of user privileges during the installation process, highlighting the importance of safeguarding against unauthorized access through DLL manipulation.

References