Lucene search

K
cveJpcertCVE-2014-0818
HistoryFeb 22, 2014 - 9:55 p.m.

CVE-2014-0818

2014-02-2221:55:09
CWE-94
jpcert
web.nvd.nist.gov
38
autodesk
autocad
cve-2014-0818
vulnerability
untrusted search path
local users
privileges
vbscript

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

67.8%

Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path.

Affected configurations

Nvd
Node
autodeskautocadRange≀2013
VendorProductVersionCPE
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

67.8%