Deserialization of untrusted data

2022-07-2920:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CPENameOperatorVersion
design_revieweq2018 hotfix
design_revieweq2018 hotfix2
design_revieweq2018 hotfix3
design_revieweq2018 hotfix4
design_revieweq2018
design_revieweq2018 hotfix5
design_revieweq2017
design_revieweq2013
design_revieweq2012
design_revieweq2011

Name	Operator	Version
design_review	eq	2018 hotfix
design_review	eq	2018 hotfix2
design_review	eq	2018 hotfix3
design_review	eq	2018 hotfix4
design_review	eq	2018
design_review	eq	2018 hotfix5
design_review	eq	2017
design_review	eq	2013
design_review	eq	2012
design_review	eq	2011

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009