7.8

CVE-2022-41309

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ Autocad Version 2019
Autodesk ≫ Autocad Version 2020
Autodesk ≫ Autocad Version 2021
Autodesk ≫ Autocad Version 2022
Autodesk ≫ Autocad Version 2022 SwPlatform macos
Autodesk ≫ Autocad Version 2023
Autodesk ≫ Autocad Advance Steel Version 2019
Autodesk ≫ Autocad Advance Steel Version 2020
Autodesk ≫ Autocad Advance Steel Version 2021
Autodesk ≫ Autocad Advance Steel Version 2022
Autodesk ≫ Autocad Advance Steel Version 2023
Autodesk ≫ Autocad Architecture Version 2019
Autodesk ≫ Autocad Architecture Version 2020
Autodesk ≫ Autocad Architecture Version 2021
Autodesk ≫ Autocad Architecture Version 2022
Autodesk ≫ Autocad Architecture Version 2023
Autodesk ≫ Autocad Civil 3d Version 2019
Autodesk ≫ Autocad Civil 3d Version 2020
Autodesk ≫ Autocad Civil 3d Version 2021
Autodesk ≫ Autocad Civil 3d Version 2022
Autodesk ≫ Autocad Civil 3d Version 2023
Autodesk ≫ Autocad Electrical Version 2019
Autodesk ≫ Autocad Electrical Version 2020
Autodesk ≫ Autocad Electrical Version 2021
Autodesk ≫ Autocad Electrical Version 2022
Autodesk ≫ Autocad Electrical Version 2023
Autodesk ≫ Autocad Lt Version 2019
Autodesk ≫ Autocad Lt Version 2020
Autodesk ≫ Autocad Lt Version 2021
Autodesk ≫ Autocad Lt Version 2022
Autodesk ≫ Autocad Lt Version 2022 SwPlatform macos
Autodesk ≫ Autocad Lt Version 2023
Autodesk ≫ Autocad Map 3d Version 2019
Autodesk ≫ Autocad Map 3d Version 2020
Autodesk ≫ Autocad Map 3d Version 2021
Autodesk ≫ Autocad Map 3d Version 2022
Autodesk ≫ Autocad Map 3d Version 2023
Autodesk ≫ Autocad Mechanical Version 2019
Autodesk ≫ Autocad Mechanical Version 2020
Autodesk ≫ Autocad Mechanical Version 2021
Autodesk ≫ Autocad Mechanical Version 2022
Autodesk ≫ Autocad Mechanical Version 2023
Autodesk ≫ Autocad Mep Version 2019
Autodesk ≫ Autocad Mep Version 2020
Autodesk ≫ Autocad Mep Version 2021
Autodesk ≫ Autocad Mep Version 2022
Autodesk ≫ Autocad Mep Version 2023
Autodesk ≫ Autocad Plant 3d Version 2019
Autodesk ≫ Autocad Plant 3d Version 2020
Autodesk ≫ Autocad Plant 3d Version 2021
Autodesk ≫ Autocad Plant 3d Version 2022
Autodesk ≫ Autocad Plant 3d Version 2023
Autodesk ≫ Design Review Version 2018 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
Patch
Vendor Advisory