Lucene search
HistoryJul 29, 2022 - 8:15 p.m.
CVE-2022-27865
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.3%
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Affected configurations
Node
autodeskdesign_reviewMatch2011-
ORautodeskdesign_reviewMatch2012-
ORautodeskdesign_reviewMatch2013-
ORautodeskdesign_reviewMatch2017-
ORautodeskdesign_reviewMatch2018-
ORautodeskdesign_reviewMatch2018hotfix
ORautodeskdesign_reviewMatch2018hotfix2
ORautodeskdesign_reviewMatch2018hotfix3
ORautodeskdesign_reviewMatch2018hotfix4
ORautodeskdesign_reviewMatch2018hotfix5
Related
cvelist
cvelist
CVE-2022-27865
2022-07-29 19:01:34
cve
cve
CVE-2022-27865
2022-07-29 20:15:12
prion
prion
Code injection
2022-07-29 20:15:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.3%
Related for NVD:CVE-2022-27865