Design/Logic Flaw

2022-04-1120:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.

CPENameOperatorVersion
advance_steelge2022
advance_steellt2022.1.2
advance_steelge2019
advance_steellt2019.1.4
advance_steelge2020
advance_steellt2020.1.5
advance_steelge2021
advance_steellt2021.1.2
autocadge2022
autocadlt2022.1.2

Name	Operator	Version
advance_steel	ge	2022
advance_steel	lt	2022.1.2
advance_steel	ge	2019
advance_steel	lt	2019.1.4
advance_steel	ge	2020
advance_steel	lt	2020.1.5
advance_steel	ge	2021
advance_steel	lt	2021.1.2
autocad	ge	2022
autocad	lt	2022.1.2