Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
References
Link | Resource |
---|---|
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-06-21 08:15
Updated : 2022-06-29 10:18
NVD link : CVE-2022-27871
Mitre link : CVE-2022-27871
JSON object : View
CWE
CWE-770
Allocation of Resources Without Limits or Throttling
Products Affected
autodesk
- autocad
- 3ds_max
- design_review
- autocad_mep
- revit
- navisworks
- autocad_electrical
- autocad_lt
- autocad_civil_3d
- advance_steel
- autocad_map_3d
- autocad_mechanical
- autocad_architecture
- autocad_plant_3d