CVE Catalog

CVE-2014-3938

High
Published: Translated: NVD NIST

Summary

Integer overflow in Autodesk SketchBook Pro before version 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, triggering a heap-based buffer overflow.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute code, posing a significant security risk to systems using this application.

Recommendation

It is recommended to update Autodesk SketchBook Pro to version 6.2.6 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Autodesk SketchBook Pro

Original NVD description (English source)

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS