CVE-2022-27865

Description

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.

Related CPE's

aautodeskdesign_review2018hotfix******

aautodeskdesign_review2018hotfix2******

aautodeskdesign_review2018hotfix3******

aautodeskdesign_review2018hotfix4******

aautodeskdesign_review2018-******

aautodeskdesign_review2018hotfix5******

aautodeskdesign_review2017-******

aautodeskdesign_review2013-******

aautodeskdesign_review2012-******

aautodeskdesign_review2011-******

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io