Autodesk IDrop ActiveX Control 'IDrop.ocx' Multiple Heap Memory Corruption

[Anonymous]

I am running Autocad 2017LT and cannot get rid of the Autodesk IDrop Active X Control "IDrop.ocx" Multiple Heap Memory Vulnerabilities.

-Neither Idrop ocx exist on the system

-I have taken all necessary actions in the attached document to include, fix; remove or set killbit for the affected control http://support.microsoft.com/kb/240797

But the vulnerability still exists during scans.

What action can be taken?

[steven-g]

Have you seen this in your searching, it's the only mention I found from Autodesk. It looks to be a windows issue?

[pendean]

Similar forum post that may help too https://forums.autodesk.com/t5/autocad-mep-forum/autodesk-idrop-activex-control-heap-corruption/td-p...

[Anonymous]

The ocx files referenced do not exist on the system running Autocad LT 2017.  Vulnerabilities still exist

[steven-g]

What are the problems you are seeing related to this, are you getting error messages from Autocad telling you this?

[Anonymous]

No error messages.  Gotta get rid of the vulnerability or lose Autocad

[pendean]

The iDrop functionality was removed starting in LT2019 I believe: time to upgrade.

>>>...or lose Autocad...<<<
or go buy software from somewhere else if the previous suggestion is unattainable.

HTH

[steven-g]

Sorry, I didn't spot your attachment in the first post, I just found it. Have you tried doing a windows search of your main drive for *.ocx files, which are active x files, it might show something up that you could look more deeply into. I found IDrop.ocx in an old student version of Autodesk Revit (which is no longer accessible) so I could uninstall that. Plus a couple of different ??.ocx files in the Autodesk 2020 version folders, strangely enough not in 2018 or 2019 (I no longer have 2017 installed).

The search found lots of files in windows but if your issue is only with Autocad then see what turns up and then you can search further on those filenames to see if they are related. 

[Anonymous]

No autocad messages..  trying to resolve the vulnerability

[Anonymous]

Searched the entire hardrive and looked for any hidden files, etc....  the files are not on the PC.  But the vulnerabiiity still shows up in scans

[steven-g]

There is no mention of a file location in that security report, maybe it is just a false positive, "YOU have Autocad installed, so you must have IDrop.ocx on your computer" Who generates that report do you have an IT department who can hunt it down, or ask the people from the company that produced the security software.

Or upgrade to a newer version of Autocad.