Lucene search

[email protected]NVD:CVE-2023-41139

HistoryNov 23, 2023 - 4:15 a.m.

CVE-2023-41139

2023-11-2304:15:07

CWE-119

CWE-822

[email protected]

web.nvd.nist.gov

autodesk

autocad

stp file

parsing

vulnerability

code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

15.9%

JSON

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected configurations

Nvd

Node

autodeskautocadRange<2024.1macos

autodeskautocadRange2023.0.0–2023.1.4

autodeskautocadRange2024.0.0–2024.1.1

autodeskautocad_advance_steelRange<2023.1.4

autodeskautocad_advance_steelRange2024.0.0–2024.1.1

autodeskautocad_architectureRange<2023.1.4

autodeskautocad_architectureRange2024.0.0–2024.1.1

autodeskautocad_civil_3dRange<2023.1.4

autodeskautocad_civil_3dRange2024.0.0–2024.1.1

autodeskautocad_electricalRange<2023.1.4

autodeskautocad_electricalRange2024.0.0–2024.1.1

autodeskautocad_ltRange<2023.1.4

autodeskautocad_ltRange<2024.1macos

autodeskautocad_ltRange2024.0.0–2024.1.1

autodeskautocad_map_3dRange<2023.1.4

autodeskautocad_map_3dRange2024.0.0–2024.1.1

autodeskautocad_mechanicalRange<2023.1.4

autodeskautocad_mechanicalRange2024.0.0–2024.1.1

autodeskautocad_mepRange<2023.1.4

autodeskautocad_mepRange2024.0.0–2024.1.1

autodeskautocad_plant_3dRange<2023.1.4

autodeskautocad_plant_3dRange2024.0.0–2024.1.1

VendorProductVersionCPE
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*
autodeskautocad*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
autodeskautocad_advance_steel*cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
autodeskautocad_architecture*cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
autodeskautocad_civil_3d*cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
autodeskautocad_electrical*cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
autodeskautocad_lt*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
autodeskautocad_lt*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*
autodeskautocad_map_3d*cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
autodeskautocad_mechanical*cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autodesk	autocad	*	cpe:2.3:a:autodesk:autocad::::::macos::*
autodesk	autocad	*	cpe:2.3:a:autodesk:autocad::::::::
autodesk	autocad_advance_steel	*	cpe:2.3:a:autodesk:autocad_advance_steel::::::::
autodesk	autocad_architecture	*	cpe:2.3:a:autodesk:autocad_architecture::::::::
autodesk	autocad_civil_3d	*	cpe:2.3:a:autodesk:autocad_civil_3d::::::::
autodesk	autocad_electrical	*	cpe:2.3:a:autodesk:autocad_electrical::::::::
autodesk	autocad_lt	*	cpe:2.3:a:autodesk:autocad_lt::::::::
autodesk	autocad_lt	*	cpe:2.3:a:autodesk:autocad_lt::::::macos::*
autodesk	autocad_map_3d	*	cpe:2.3:a:autodesk:autocad_map_3d::::::::
autodesk	autocad_mechanical	*	cpe:2.3:a:autodesk:autocad_mechanical::::::::