CVE-2009-3578: Autodesk Alias Wavefront Maya

High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days.

Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."

Affected products

• Autodesk Alias Wavefront Maya: version 6.5 only; version 7.0 only
• Autodesk Autodesk Maya: version 8.0 only; version 8.5 only

Published 2009-11-24. Last modified 2026-06-16.