CVE-2022-27871

Description

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Related CPE's

aautodeskautocad_plant_3d2019*******

aautodeskautocad_plant_3d2020*******

aautodeskautocad_mep2019*******

aautodeskautocad_mep2020*******

aautodeskautocad_mechanical2019*******

aautodeskautocad_mechanical2020*******

aautodeskautocad_map_3d2019*******

aautodeskautocad_map_3d2020*******

aautodeskautocad_electrical2019*******

aautodeskautocad_civil_3d2019*******

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011

Vendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

AccessComplexity

MEDIUM

ConfidentialityImpact

PARTIAL

AvailabilityImpact

PARTIAL

IntegrityImpact

PARTIAL

BaseScore

6.800000190734863

VectorString

AV:N/AC:M/Au:N/C:P/I:P/A:P

Version

2.0

AccessVector

NETWORK

Authentication

NONE

Created by Yello
About Severity.io