CVE-2024-25423 PoC — MAXON CINEMA 4D 安全漏洞

Source

https://github.com/DriverUnload/cve-2024-25423

Associated Vulnerability

Title:MAXON CINEMA 4D 安全漏洞 (CVE-2024-25423)
Description:Maxon Cinema 4D是德国Maxon公司的一款三维绘图软件。 MAXON CINEMA 4D R2024.2.0版本存在安全漏洞，该漏洞源于允许本地攻击者通过特制的c4d_base.xdl64文件执行任意代码。

Description

Cinema 4D out-of-bounds write vulnerability when parsing c4d files

Readme

# cve-2024-25423
An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d file.

# Additional Information
Cinema 4D out-of-bounds write vulnerability when parsing c4d files

# Affected Component

c4d_base.xdl64

# Tested Versions

CINEMA 4D R2024.2.0

# Attack Type
Local

File Snapshot


 [4.0K]  /data/pocs/68b240803df396ac61eb39a7b4708c14d95ff7a6
├── [ 25K]  poc.c4d
└── [ 321]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!