CVE-2009-3578

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2009-11-24

Last modified

2024-08-07

Weaknesses

CWE-94

Affected products

• Alias Wavefront Maya (Autodesk)
• Autodesk Maya (Autodesk)

References

• http://securitytracker.com/id?1023228
• http://www.coresecurity.com/content/maya-arbitrary-command-execution
• http://www.securityfocus.com/archive/1/508013/100/0/threaded
• http://www.securityfocus.com/bid/36636