Lucene search

[email protected]CVE-2023-29068

HistoryJun 27, 2023 - 7:15 p.m.

CVE-2023-29068

2023-06-2719:15:09

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-29068

nvd

memory corruption

pskernel.dll

code execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

22.2%

JSON

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CPENameOperatorVersion
autodesk:aliasautodesk aliaslt2023.1.1
autodesk:autocadautodesk autocadlt2020.1.6
autodesk:autocadautodesk autocadeq2020.1.5
autodesk:autocadautodesk autocadeq2020
autodesk:autocadautodesk autocadeq2020.1.4
autodesk:autocadautodesk autocadlt2021.1.3
autodesk:autocadautodesk autocadeq2021.1.2
autodesk:autocadautodesk autocadeq2021
autodesk:autocadautodesk autocadeq2021.1.1
autodesk:autocadautodesk autocadlt2022.1.3

CPE	Name	Operator	Version
autodesk:alias	autodesk alias	lt	2023.1.1
autodesk:autocad	autodesk autocad	lt	2020.1.6
autodesk:autocad	autodesk autocad	eq	2020.1.5
autodesk:autocad	autodesk autocad	eq	2020
autodesk:autocad	autodesk autocad	eq	2020.1.4
autodesk:autocad	autodesk autocad	lt	2021.1.3
autodesk:autocad	autodesk autocad	eq	2021.1.2
autodesk:autocad	autodesk autocad	eq	2021
autodesk:autocad	autodesk autocad	eq	2021.1.1
autodesk:autocad	autodesk autocad	lt	2022.1.3

Rows per page:

1-10 of 1561

References

www.autodesk.com/trust/security-advisories/adsk-sa-2023-0009

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

22.2%

JSON

Related for CVE-2023-29068

prion1 cvelist1 nessus3