CVE-2009-3576
Autodesk Softimage 7.x and Softimage XSI 6.x - Remote Code Execution via Scene Table of Contents Script_Content Element
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3576. PoCs published by Diego Juarez, Core Security.
AI-analyzed exploit summary This exploit leverages a PostLoadScript in Autodesk Softimage to execute arbitrary code via JScript. It downloads and executes a payload (putty.exe) from a remote URL using ActiveX objects, demonstrating remote code execution.
Description
Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents (aka .scntoc) file with a Script_Content element, as demonstrated by code that loads the WScript.Shell ActiveX control.
Exploits (2)
This exploit leverages a PostLoadScript in Autodesk Softimage to execute arbitrary code via JScript. It downloads and executes a payload (putty.exe) from a remote URL using ActiveX objects, demonstrating remote code execution.
This advisory describes a vulnerability in Autodesk SoftImage where a specially crafted .scntoc XML file can execute arbitrary commands via embedded JScript. The PoC demonstrates downloading and executing a remote payload using ActiveX objects.