Lucene search
HistoryApr 14, 2023 - 7:15 p.m.
CVE-2023-27915
autodesk
autocad
2023
x_b file
memory corruption
vulnerability
read access violation
code execution
current process
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
27.3%
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected configurations
Node
autodeskautocadRange2023–2023.1.3
ORautodeskautocad_advance_steelRange2023–2023.1.3
ORautodeskautocad_architectureRange2023–2023.1.3
ORautodeskautocad_civil_3dRange2023–2023.1.3
ORautodeskautocad_electricalRange2023–2023.1.3
ORautodeskautocad_ltRange2023–2023.1.3
ORautodeskautocad_map_3dRange2023–2023.1.3
ORautodeskautocad_mechanicalRange2023–2023.1.3
ORautodeskautocad_mepRange2023–2023.1.3
ORautodeskautocad_plant_3dRange2023–2023.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| autodesk | autocad | * | cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* |
| autodesk | autocad_advance_steel | * | cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:* |
| autodesk | autocad_architecture | * | cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* |
| autodesk | autocad_civil_3d | * | cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:* |
| autodesk | autocad_electrical | * | cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* |
| autodesk | autocad_lt | * | cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* |
| autodesk | autocad_map_3d | * | cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* |
| autodesk | autocad_mechanical | * | cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* |
| autodesk | autocad_mep | * | cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* |
| autodesk | autocad_plant_3d | * | cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-27915
2023-04-14 00:00:00
cve
cve
CVE-2023-27915
2023-04-14 19:15:09
prion
prion
Memory corruption
2023-04-14 19:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
27.3%
Related for NVD:CVE-2023-27915