DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 | Patch Vendor Advisory |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 - Patch, Vendor Advisory |
Information
Published : 2019-08-23 20:15
Updated : 2024-11-21 04:48
NVD link : CVE-2019-7364
Mitre link : CVE-2019-7364
CVE.ORG link : CVE-2019-7364
JSON object : View
Products Affected
autodesk
- advance_steel
- autocad_plant_3d
- autocad_electrical
- autocad_map_3d
- civil_3d
- autocad
- autocad_mep
- autocad_p\&id
- autocad_architecture
- autocad_mechanical
- autocad_lt
CWE
CWE-427
Uncontrolled Search Path Element