Nemetschek Group (Maxon) Cinema 4D 2023.2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:nemetschek:cinema_4d:2023.2.1:*:*:*:*:*:*:*

part: a version: 2023.2.1 update: *

VendorNemetschek (a3301779-43a9-56e5-b146-7caa8939343b)
ProductCinema 4D (9dbcb0cd-e1b2-5472-b03f-b502a41fc8f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40491 vulnerable 2026-06-08 06:11:03.337213 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21439.
Published: 2024-05-03T02:11:22.669Z
Updated: 2024-08-02T18:31:53.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40490 vulnerable 2026-06-08 06:11:03.336746 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21438.
Published: 2024-05-07T22:55:07.413Z
Updated: 2024-08-02T18:31:53.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40489 vulnerable 2026-06-08 06:11:03.336401 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21437.
Published: 2024-05-03T02:11:21.945Z
Updated: 2024-08-02T18:31:53.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40488 vulnerable 2026-06-08 06:11:03.335869 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21436.
Published: 2024-05-03T02:11:21.251Z
Updated: 2024-08-02T18:31:53.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40487 vulnerable 2026-06-08 06:11:03.335329 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Maxon Cinema 4D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21435.
Published: 2024-05-03T02:11:20.496Z
Updated: 2024-08-02T18:31:53.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40486 vulnerable 2026-06-08 06:11:03.334680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40485 vulnerable 2026-06-08 06:11:03.334108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40484 vulnerable 2026-06-08 06:11:03.327157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40483 vulnerable 2026-06-08 06:11:03.326664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40482 vulnerable 2026-06-08 06:11:03.326064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.