CVE-2009-3577

Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.09% chance of exploitation in the next 30 days, 92th percentile

Published

2009-11-24

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33272

References

• CVE Record
• NVD entry

Related

• CVE-2009-3576
• CVE-2009-3578
• CVE-2009-3574
• CVE-2009-3586
• CVE-2009-3573
• CVE-2009-3590