Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
References
Link | Resource |
---|---|
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 | Vendor Advisory |
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:56
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 - Vendor Advisory |
Information
Published : 2022-06-21 15:15
Updated : 2024-11-21 06:56
NVD link : CVE-2022-27871
Mitre link : CVE-2022-27871
CVE.ORG link : CVE-2022-27871
JSON object : View
Products Affected
autodesk
- 3ds_max
- advance_steel
- autocad_civil_3d
- autocad_plant_3d
- autocad_electrical
- autocad_map_3d
- autocad
- autocad_mep
- design_review
- revit
- autocad_architecture
- autocad_mechanical
- navisworks
- autocad_lt
CWE
CWE-770
Allocation of Resources Without Limits or Throttling