Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
References
Link | Resource |
---|---|
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Jun 2022, 17:18
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 - Vendor Advisory | |
First Time |
Autodesk 3ds Max
Autodesk autocad Mep Autodesk autocad Mechanical Autodesk advance Steel Autodesk autocad Electrical Autodesk autocad Plant 3d Autodesk autocad Architecture Autodesk navisworks Autodesk autocad Autodesk design Review Autodesk autocad Lt Autodesk revit Autodesk Autodesk autocad Civil 3d Autodesk autocad Map 3d |
|
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
CWE | CWE-770 | |
CPE | cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:* cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:* cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:3ds_max:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:* |
21 Jun 2022, 15:34
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-06-21 15:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-27871
Mitre link : CVE-2022-27871
CVE.ORG link : CVE-2022-27871
JSON object : View
Products Affected
autodesk
- autocad_electrical
- navisworks
- autocad_architecture
- autocad_civil_3d
- design_review
- autocad_map_3d
- autocad_plant_3d
- autocad_mechanical
- advance_steel
- autocad
- autocad_lt
- revit
- 3ds_max
- autocad_mep
CWE
CWE-770
Allocation of Resources Without Limits or Throttling