VULNERABILITY INTELLIGENCE
CVE-2008-4472
CVSS score9.3 HIGH
EPSS probability7.84%
CISA KEVNot currently listed
Published2008-10-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method.