Lucene search
+L

242 matches found

Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•39 views

Autodesk Design Review PNG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5AI score0.01606EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•27 views

Autodesk Design Review TIFF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.8AI score0.02208EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•27 views

Autodesk Design Review PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.1AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•35 views

Autodesk Design Review PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS3.5AI score0.01708EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/22 12:00 a.m.•28 views

Autodesk Design Review PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.9AI score0.02208EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•1 views

PT-2021-3514

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Description The issue is related to the parsing of certain file formats, including TIFF, TIF, PICT, TGA, and DWF, which can lead to reading beyond allocated boundaries in memory. This can...

10CVSS0.01708EPSS
SaveExploits0References40
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•11 views

PT-2021-3516

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Description A Double Free issue in the PDF file parsing functionality of Autodesk Design Review allows remote attackers to execute arbitrary code. This requires user interaction, where the targ...

10CVSS6.4AI score0.03017EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2021/02/10 12:00 a.m.•2 views

PT-2021-3518

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Autodesk AutoCAD affected versions not specified Description The issue is related to a buffer overflow in the parsing of various file formats, including PDF, PCX, PICT, RCL, TIF, BMP, and PSD...

10CVSS0.01708EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•1 views

PT-2021-30931

Уязвимость реализации синтаксического анализа файлов формата DWF программного средства для нанесения электронных пометок Autodesk Design Review связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код путем открытия...

7.2CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•0 views

PT-2021-3517

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Description A heap-based buffer overflow could occur while parsing certain file formats, including PICT, PCX, RCL, or TIFF files. This issue can be exploited to execute arbitrary code. The...

10CVSS7.2AI score0.02208EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•1 views

PT-2021-3519

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Autodesk AutoCAD versions 2011 through 2018 Description The issue is related to a buffer overflow when parsing TIFF and PCX files, allowing a remote attacker to execute arbitrary code by crafti...

10CVSS0.01613EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•3 views

PT-2021-3515

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions 2011 through 2018 Description The issue is related to the parsing of PNG, PDF, or DWF files, which can lead to a use-after-free condition, allowing remote malicious actors to execute arbitrary code. This can occ...

10CVSS6.9AI score0.01606EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•11 views

PT-2021-3513 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review versions 2011 through 2018 Description: A Type Confusion issue occurs when processing a maliciously crafted PDF file, allowing a malicious actor to execute arbitrary code. The vulnerability is related to errors in data...

10CVSS7.8AI score0.01767EPSS
SaveExploits0References11
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•17 views

Autodesk Design Review Code Issue Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing and tracking changes to 2D and 3D design files. A code issue vulnerability exists in Autodesk Design Review. An attacker could exploit...

7.8CVSS7.3AI score0.01235EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/26 12:00 a.m.•14 views

Autodesk Design Review Resource Management Error Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing and tracking changes to 2D and 3D design files. Autodesk Design Review is vulnerable to a resource management error. Detailed...

7.8CVSS6.9AI score0.01298EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/23 8:15 p.m.•20 views

CVE-2019-7362

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution...

7.8CVSS7.2AI score0.01235EPSS
SaveExploits0References1
OSV
OSV
•added 2019/08/23 8:15 p.m.•12 views

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

7.8CVSS7.2AI score0.01298EPSS
SaveExploits0References1
NVD
NVD
•added 2019/08/23 8:15 p.m.•25 views

CVE-2019-7363

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

7.8CVSS7.8AI score0.01298EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/23 8:15 p.m.•26 views

Design/Logic Flaw

Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution...

6.8CVSS7.8AI score0.01298EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/23 7:35 p.m.•140 views

CVE-2019-7363

CVE-2019-7363 describes a use-after-free vulnerability in Autodesk Design Review for versions 2011, 2012, 2013 and 2018. The issue arises when processing malicious DWF files, which may leverage the use-after-free to achieve code execution. Connected records reiterate the same core details (root c...

7.8CVSS7.7AI score0.01298EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder