CVE-2021-40161

🗓️ 23 Dec 2021 18:31:43Reported by autodeskType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 68 Views

A Memory Corruption vulnerability in PDFTro

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the library for viewing, printing, rendering, creating, and processing PDF files. The PDFTron SDK is software for modeling, designing, and drafting in AutoCAD. This vulnerability relates to errors in the mechanism for checking path searching for dynamically attached libraries, allowing a perpetrator to execute arbitrary code.	25 Jan 202200:00	–	bdu_fstec
Circl	CVE-2021-40161	23 Dec 202122:19	–	circl
CNNVD	Autodesk Navisworks 缓冲区错误漏洞	9 Dec 202100:00	–	cnnvd
CNVD	Autodesk Navisworks code issue vulnerability	12 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-40161	23 Dec 202118:31	–	cvelist
EUVD	EUVD-2021-27346	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Autodesk products	10 Dec 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Autodesk products	4 Mar 202200:00	–	ncsc
NVD	CVE-2021-40161	23 Dec 202119:15	–	nvd
OSV	CVE-2021-40161	23 Dec 202119:15	–	osv

NVD

Node

autodesk revitRange<2020.2.5

autodesk revitRange2021–2021.1.6

autodesk revitRange2022–2022.1.2

Node

autodesk navisworksRange<2019.6

autodesk navisworksRange2020–2020.4

autodesk navisworksRange2021–2021.3

autodesk navisworksRange2022–2022.2

Node

autodesk advance_steelRange<2019.1.4

autodesk advance_steelRange2020–2020.1.5

autodesk advance_steelRange2021–2021.1.2

autodesk advance_steelRange2022–2022.1.2

Node

autodesk autocadRange<2019.1.4

autodesk autocadRange2020–2020.1.5

autodesk autocadRange2021–2021.1.2

autodesk autocadRange2022–2022.1.2

Node

autodesk autocad_architectureRange<2019.1.4

autodesk autocad_architectureRange2020–2020.1.5

autodesk autocad_architectureRange2021–2021.1.2

autodesk autocad_architectureRange2022–2022.1.2

Node

autodesk autocad_electricalRange<2019.1.4

autodesk autocad_electricalRange2020–2020.1.5

autodesk autocad_electricalRange2021–2021.1.2

autodesk autocad_electricalRange2022–2022.1.2

Node

autodesk autocad_map_3dRange<2019.1.4

autodesk autocad_map_3dRange2020–2020.1.5

autodesk autocad_map_3dRange2021–2021.1.2

autodesk autocad_map_3dRange2022–2022.1.2

Node

autodesk autocad_mechanicalRange<2019.1.4

autodesk autocad_mechanicalRange2020–2020.1.5

autodesk autocad_mechanicalRange2021–2021.1.2

autodesk autocad_mechanicalRange2022–2022.1.2

Node

autodesk autocad_mepRange<2019.1.4

autodesk autocad_mepRange2020–2020.1.5

autodesk autocad_mepRange2021–2021.1.2

autodesk autocad_mepRange2022–2022.1.2

Node

autodesk autocad_plant_3dRange<2019.1.4

autodesk autocad_plant_3dRange2020–2020.1.5

autodesk autocad_plant_3dRange2021–2021.1.2

autodesk autocad_plant_3dRange2022–2022.1.2

Node

autodesk autocad_ltRange<2019.1.4

autodesk autocad_ltRange2020–2020.1.5

autodesk autocad_ltRange2021–2021.1.2

autodesk autocad_ltRange2022–2022.1.2

Node

autodesk civil_3dRange<2019.1.4

autodesk civil_3dRange2020–2020.1.5

autodesk civil_3dRange2021–2021.1.2

autodesk civil_3dRange2022–2022.1.2

Node

autodesk autocadRange2022–2022.2macos

autodesk autocadMatch2020macos

autodesk autocadMatch2021macos

autodesk autocadMatch2022macos

Node

autodesk autocad_ltRange2022–2022.2macos

autodesk autocad_ltMatch2020macos

autodesk autocad_ltMatch2021macos

Node

autodesk design_reviewMatch2018-

autodesk design_reviewMatch2018hotfix

autodesk design_reviewMatch2018hotfix2

autodesk design_reviewMatch2018hotfix3

autodesk design_reviewMatch2018hotfix4

[
  {
    "product": "Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT,  Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 9.0.7"
      }
    ]
  }
]

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010

21 Nov 2024 06:23Current

7.8High risk

Vulners AI Score7.8

CVSS 24.4

CVSS 3.17.8

EPSS0.00064

CWE-787