Vulnerabilities fixed in Autodesk products

🗓️ 04 Mar 2022 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Autodesk fixed vulnerabilities that allow arbitrary code execution if a user opens a rogue file.

Reporter	Title	Published	Views	Family All 148
ATTACKERKB	CVE-2022-25790	11 Apr 202220:15	–	attackerkb
ATTACKERKB	CVE-2022-25795	13 Apr 202218:15	–	attackerkb
ATTACKERKB	CVE-2022-25792	11 Apr 202220:15	–	attackerkb
ATTACKERKB	CVE-2022-25789	11 Apr 202220:15	–	attackerkb
ATTACKERKB	CVE-2022-25791	11 Apr 202220:15	–	attackerkb
BDU FSTEC	Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code	20 Jul 202100:00	–	bdu_fstec
BDU FSTEC	Vulnerability of software for modeling, design, and drawing in AutoCAD, related to data writing beyond the buffer, allowing a perpetrator to execute arbitrary code	3 Aug 202100:00	–	bdu_fstec
BDU FSTEC	Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to incorrect handling of exceptional states, allowing a violator to execute arbitrary code.	17 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the disclosure of information in error-prone areas of data, allows attackers to write arbitrary files.	17 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the library for viewing, printing, rendering, creating, and processing PDF files. The PDFTron SDK is software for modeling, designing, and drafting in AutoCAD. This vulnerability relates to errors in the mechanism for checking path searching for dynamically attached libraries, allowing a perpetrator to execute arbitrary code.	25 Jan 202200:00	–	bdu_fstec

04 Mar 2022 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8

CVSS 26.8

EPSS0.00853

Autodesk products arbitrary code execution rogue file user tricked security fixes updates available