CVE-2019-7361

An attacker may convince a victim to open a malicious action micro .actm file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018,...

CVE-2019-7359

The CVE describes an exploitable heap overflow in the AcCellMargin handling code during DXF parsing in Autodesk AutoCAD 2018 and related 2018-era products (Advance Steel, Architecture, Electrical, Map 3D, Mechanical, MEP, P&ID, Plant 3D, LT, Civil 3D). The vulnerability arises when parsing a DXF ...

CVE-2019-7361

The vulnerability CVE-2019-7361 affects Autodesk 2018 product family, including Advance Steel 2018, AutoCAD 2018, AutoCAD Architecture 2018, AutoCAD Electrical 2018, AutoCAD Map 3D 2018, AutoCAD Mechanical 2018, AutoCAD MEP 2018, AutoCAD P&ID 2018, AutoCAD Plant 3D 2018, AutoCAD LT 2018, and Civi...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

AutoDesk AutoCAD 2019 cell margin code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019 P.46.0.0. A specially crafted DXF file with too many cell margins populating an AcCellMargin object can cause a heap overflow, resulting in code execution. An attacker can provide a...

AutoDesk AutoCAD 2019 LinetypeTableRecord Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019. A specially crafted DXF file can cause a use-after-free vulnerability, resulting in code execution. Tested Versions AutoDesk AutoCAD 2019 P.46.0.0 Product URLs...

AutoDesk AutoCAD 2019 DXF-parsing code execution vulnerability

Summary An exploitable heap overflow vulnerability exists in the DXF-parsing functionality of AutoDesk AutoCAD 2019 P.46.0.0. A specially crafted DXF file can cause a heap overflow, resulting in code execution. An attacker must convince a victim to open a malicious document in order to trigger th...

CVE-2017-15759

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV near NULL starting at BabaCAD4Image!ShowPlugInOptions+0x000000000001b3f3."...

CVE-2017-15746

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x00000000003d21b3."...

AutoCAD 360 - ContentProvider mode not defined, Dangerous filesystem permissions, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application AutoCAD 360 published at the 'play' market has multiple vulnerabilities...

AutoCAD DWG/DXF To PDF Converter 2.2 Buffer Overflow

Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title...

AutoCAD DWG and DXF To PDF Converter 2.2 - Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: email protected Website: CVE:...

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow

Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title...

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected]...

Hewlett-Packard KeyView IDOL AutoCAD Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard KeyView IDOL. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling...

Autodesk AutoCAD Insecure Library Loading (CVE-2014-0819)

An insecure library loading vulnerability has been reported in AutoCAD. The vulnerability is due to an improper dynamic link library DLL search path leading to insecure library loading. A remote attacker could exploit this vulnerability by enticing a user to process an AutoCAD file from a malicio...

Autodesk AutoCAD Insecure FAS Loading (CVE-2014-0818)

A code execution vulnerability has been reported in AutoCAD. The vulnerability is due to using improper search path when loading FAS files. A remote attacker could exploit this vulnerability by enticing a user to process an FAS file from a malicious source...

Autodesk AutoCAD DWG Buffer Overflow

The remote host has a version of Autodesk AutoCAD installed that is potentially affected by an error related to handling DWG files that could lead to buffer overflows and possibly arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73292;...

Autodesk AutoCAD Detection

Binary data autocadinstalled.nbin...

Autodesk AutoCAD < 2014 Multiple Vulnerabilities

The remote host has a version of Autodesk AutoCAD installed prior to AutoCAD 2014. It is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling FAS files that could allow execution of arbitrary VBScript code. CVE-2014-0818 - An error exists relat...