Description (CNA)
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D | affected 2022, 2021, 2020, 2019 |
CWE
No CWE identifiers supplied.
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004
- https://www.zerodayinitiative.com/advisories/ZDI-21-1238/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1236/
- https://www.zerodayinitiative.com/advisories/ZDI-22-378/
- https://www.zerodayinitiative.com/advisories/ZDI-22-473/
ADP enrichment
No English description supplied.