CVE-2014-3939

High

Published: 23/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in Autodesk SketchBook Pro before version 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute malicious code, posing a significant security risk to organizational systems.

Recommendation

It is recommended to update Autodesk SketchBook Pro to version 6.2.6 or later to mitigate this vulnerability.

Other vulnerabilities in Autodesk SketchBook Pro

CVE-2014-3938High
Integer overflow in Autodesk SketchBook Pro before version 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, triggering a heap-based buffer overflow.

Original NVD description (English source)

Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitmap data in a PXD file.