CVE-2022-27864

EPSS 1.11%
Veröffentlicht 29.07.2022 20:15:12
Zuletzt bearbeitet 21.11.2024 06:56:21
Erkennungen
Login

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 10 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Autodesk ≫ Design Review Version 2011 Update -

Autodesk ≫ Design Review Version 2012 Update -

Autodesk ≫ Design Review Version 2013 Update -

Autodesk ≫ Design Review Version 2017 Update -

Autodesk ≫ Design Review Version 2018 Update -

Autodesk ≫ Design Review Version 2018 Update hotfix

Autodesk ≫ Design Review Version 2018 Update hotfix2

Autodesk ≫ Design Review Version 2018 Update hotfix3

Autodesk ≫ Design Review Version 2018 Update hotfix4

Autodesk ≫ Design Review Version 2018 Update hotfix5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.11%	0.631

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-415 Double Free

The product calls free() twice on the same memory address.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-27864

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-27864

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-27864

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-27864