7.8

CVE-2022-27871

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ 3ds Max Version 2021
Autodesk ≫ 3ds Max Version 2022
Autodesk ≫ Advance Steel Version 2019
Autodesk ≫ Advance Steel Version 2020
Autodesk ≫ Advance Steel Version 2021
Autodesk ≫ Advance Steel Version 2022
Autodesk ≫ Autocad Version 2019
Autodesk ≫ Autocad Version 2020
Autodesk ≫ Autocad Version 2021
Autodesk ≫ Autocad Version 2022
Autodesk ≫ Autocad Version 2022 SwPlatform macos
Autodesk ≫ Autocad Architecture Version 2019
Autodesk ≫ Autocad Architecture Version 2020
Autodesk ≫ Autocad Architecture Version 2021
Autodesk ≫ Autocad Architecture Version 2022
Autodesk ≫ Autocad Civil 3d Version 2019
Autodesk ≫ Autocad Civil 3d Version 2020
Autodesk ≫ Autocad Civil 3d Version 2021
Autodesk ≫ Autocad Civil 3d Version 2022
Autodesk ≫ Autocad Electrical Version 2019
Autodesk ≫ Autocad Electrical Version 2020
Autodesk ≫ Autocad Electrical Version 2021
Autodesk ≫ Autocad Electrical Version 2022
Autodesk ≫ Autocad Lt Version 2019
Autodesk ≫ Autocad Lt Version 2020
Autodesk ≫ Autocad Lt Version 2021
Autodesk ≫ Autocad Lt Version 2022
Autodesk ≫ Autocad Lt Version 2022 SwPlatform macos
Autodesk ≫ Autocad Map 3d Version 2019
Autodesk ≫ Autocad Map 3d Version 2020
Autodesk ≫ Autocad Map 3d Version 2021
Autodesk ≫ Autocad Map 3d Version 2022
Autodesk ≫ Autocad Mechanical Version 2019
Autodesk ≫ Autocad Mechanical Version 2020
Autodesk ≫ Autocad Mechanical Version 2021
Autodesk ≫ Autocad Mechanical Version 2022
Autodesk ≫ Autocad Mep Version 2019
Autodesk ≫ Autocad Mep Version 2020
Autodesk ≫ Autocad Mep Version 2021
Autodesk ≫ Autocad Mep Version 2022
Autodesk ≫ Autocad Plant 3d Version 2019
Autodesk ≫ Autocad Plant 3d Version 2020
Autodesk ≫ Autocad Plant 3d Version 2021
Autodesk ≫ Autocad Plant 3d Version 2022
Autodesk ≫ Design Review Version 2018 Update -
Autodesk ≫ Navisworks Version 2019
Autodesk ≫ Navisworks Version 2020
Autodesk ≫ Navisworks Version 2022
Autodesk ≫ Revit Version 2020
Autodesk ≫ Revit Version 2021
Autodesk ≫ Revit Version 2022
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.74% 0.516
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011
Vendor Advisory