Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code

🗓️ 20 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

AutoCAD modeling and drawing software has a buffer overflow in DWG syntax analysis enabling code execution via a crafted file.

Reporter	Title	Published	Views	Family All 22
CNNVD	Autodesk AutoCAD 缓冲区错误漏洞	22 Jun 202100:00	–	cnnvd
CVE	CVE-2021-27040	25 Jun 202112:41	–	cve
Cvelist	CVE-2021-27040	25 Jun 202112:41	–	cvelist
EUVD	EUVD-2021-13811	7 Oct 202500:30	–	euvd
ICS	ICONICS GENESIS64 and Mitsubishi Electric MC Works64	21 Oct 202100:00	–	ics
NCSC	Vulnerabilities fixed in Autodesk products	22 Jun 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Autodesk products	4 Mar 202200:00	–	ncsc
NVD	CVE-2021-27040	25 Jun 202113:15	–	nvd
OSV	CVE-2021-27040	25 Jun 202113:15	–	osv
Prion	Code injection	25 Jun 202113:15	–	prion

Vulners

Node

autodesk autodesk_advance_steelMatch2022

autodesk autodesk_advance_steelMatch2021

autodesk autodesk_advance_steelMatch2020

autodesk autodesk_advance_steelMatch2019

autodesk autocadMatch2022

autodesk autocadMatch2021

autodesk autocadMatch2020

autodesk autocadMatch2019

autodesk autocad_architectureMatch2022

autodesk autocad_architectureMatch2021

autodesk autocad_architectureMatch2020

autodesk autocad_architectureMatch2019

autodesk autocad_electricalMatch2022

autodesk autocad_electricalMatch2021

autodesk autocad_electricalMatch2020

autodesk autocad_electricalMatch2019

autodesk autocad_ltMatch2022

autodesk autocad_ltMatch2021

autodesk autocad_ltMatch2020

autodesk autocad_ltMatch2019

autodesk autocad_map_3dMatch2022

autodesk autocad_map_3dMatch2021

autodesk autocad_map_3dMatch2020

autodesk autocad_map_3dMatch2019

autodesk autocad_mechanicalMatch2022

autodesk autocad_mechanicalMatch2021

autodesk autocad_mechanicalMatch2020

autodesk autocad_mechanicalMatch2019

autodesk autocad_mepMatch2022

autodesk autocad_mepMatch2021

autodesk autocad_mepMatch2020

autodesk autocad_mepMatch2019

autodesk autocad_plant_3dMatch2022

autodesk autocad_plant_3dMatch2021

autodesk autocad_plant_3dMatch2020

autodesk autocad_plant_3dMatch2019

autodesk autodesk_civil_3dMatch2022

autodesk autodesk_civil_3dMatch2021

autodesk autodesk_civil_3dMatch2020

autodesk autodesk_civil_3dMatch2019

fortinet fortigate_ipsMatch18.104

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-27040
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-712/
fortiguard	www.fortiguard.com/zeroday/FG-VD-20-137
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-712/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-CAN-12150/

19 May 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 38.8

EPSS0.02743