CVE-2009-3578

Autodesk Alias Wavefront Maya - Code Injection

Title source: rule

Description

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."

Exploits (1)

exploitdb WRITEUP VERIFIED
by Core Security · textlocalwindows
https://www.exploit-db.com/exploits/10213

References (4)

Scores

EPSS 0.0736
EPSS Percentile 91.6%

Classification

CWE
CWE-94
Status draft

Affected Products (8)

autodesk/alias_wavefront_maya
autodesk/alias_wavefront_maya
autodesk/autodesk_maya
autodesk/autodesk_maya
autodesk/autodesk_maya
autodesk/autodesk_maya
autodesk/autodesk_maya
autodesk/autodesk_maya

Timeline

Published Nov 24, 2009
Tracked Since Feb 18, 2026