CVE-2024-23124 - Exploiting an Out-of-Bound Write Vulnerability in Autodesk AutoCAD through Maliciously Crafted STP Files

---
In the world of computer-aided design (CAD) software, Autodesk AutoCAD is a powerful tool that professionals rely on for their daily needs. However, just like any other software, it is also prone to security vulnerabilities. One such vulnerability, identified as CVE-2024-23124, allows a malicious actor to crash the system, write sensitive data, or execute arbitrary code in the context of the current process by exploiting an Out-of-Bound Write vulnerability through a maliciously crafted STP file in ASMIMPORT228A.dll.

In this long-read post, we will be discussing the exploit details, provide sample code snippets, and links to original references. The aim is to increase awareness and understanding of this vulnerability to help users and developers protect their systems against potential attacks.

Vulnerability Details

---
An Out-of-Bound Write vulnerability occurs when a program writes data outside the allocated boundary of a designated buffer. In the case of CVE-2024-23124, this vulnerability is triggered when a maliciously crafted STP file is parsed through Autodesk AutoCAD. This STP file targets the ASMIMPORT228A.dll library, which is responsible for handling the STP (STEP) file format in AutoCAD.

As a result of this vulnerability, an attacker can force an Out-of-Bound Write, potentially causing a crash, writing sensitive data, or even executing arbitrary code in the context of the current process.

Exploit Code Snippet

---
Here is a sample code snippet that demonstrates the exploitation of the CVE-2024-23124 vulnerability. Note that this code is provided for educational purposes and should not be used for malicious activities.

import struct

# Malicious STP data
malicious_stp = bytearray(b'ISO-10303-21;\r\nHEADER;FILE_DESCRIPTION...\r\n')

# Buffer overflow payload
payload = b'\x90' * 100  # NOP sled
payload += b'\xCC' * 4    # Arbitrary code execution payload (software breakpoint)

# Trigger the Out-of-Bound Write by appending the payload to the STP data
malicious_stp += payload

# Save the malicious STP file
with open('exploit.stp', 'wb') as f:
    f.write(malicious_stp)

By running the above Python script, a malicious STP file named *exploit.stp* will be created. When this file is loaded in Autodesk AutoCAD, the Out-of-Bound Write vulnerability will be triggered, leading to potential software crashes or worse, arbitrary code execution in the context of the current process.

Mitigation Measures

---
To protect your systems against the CVE-2024-23124 vulnerability, the following mitigation measures are recommended:

Avoid opening untrusted STP files.

3. Employ security best practices, such as running Autodesk AutoCAD under the least privileged user account, to minimize the impact of a potential compromise.

Original References

---

For more information about CVE-2024-23124, please refer to the following original references

1. CVE-2024-23124 - National Vulnerability Database
2. Autodesk AutoCAD Security Updates
3. ISO 10303-21 - STEP File Format

Conclusion

---
Software vulnerabilities are a harsh reality that all users must contend with. Awareness and understanding of these vulnerabilities are critical to ensuring the security and integrity of systems and data. By making informed decisions about the software we use and the files we open, we can minimize the potential risks and continue to benefit from the incredible power of tools like Autodesk AutoCAD. Stay safe out there!

Timeline

Published on: 02/22/2024 03:15:08 UTC
Last modified on: 08/01/2024 13:47:06 UTC