PT-2015-3023

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions prior to 2013 Hotfix 2 Description The issue is caused by an integer overflow in Autodesk Design Review. Exploitation of this issue may allow a remote attacker to execute arbitrary code by using a specially...

Autodesk Design Review Installed

Binary data autodeskdrinstalled.nbin...

Autodesk Design Review AdView.AdViewer ActiveX Control RCE

The remote host contains the AdView.AdViewer ActiveX control, distributed with Autodesk Design Review, that is affected by a remote code execution vulnerability due to improper parsing of DWF files. An unauthenticated, remote attacker can exploit this, via a specially crafted file or website, to...

CVE-2014-9268

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...

Code injection

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...

CVE-2014-9268

The CVE-2014-9268 entry concerns Autodesk Design Review’s AdView.AdViewer.1 ActiveX control. Affected component: AdView.AdViewer ActiveX in ADR prior to 2013 Hotfix 1. Root cause: improper parsing of DWF files enables an unauthenticated, remote attacker to execute arbitrary code. Impact: remote c...

CVE-2014-9268

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...

CVE-2014-9268: Improper Input Validation

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review ADR before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file...

Autodesk Design Review AdView.AdViewer.1 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2014-8915

Name of the Vulnerable Software and Affected Versions Autodesk Design Review versions prior to 2013 Hotfix 1 Description The issue allows remote attackers to execute arbitrary code via a crafted DWF file. This is related to the AdView.AdViewer.1 ActiveX control in Autodesk Design Review...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll, 2 whiptkwt.7.12.601.dll, or 3 xamlwt.7.6.0.dll file in the current working directory, as demonstrated by a directory that contains a .dwf...

CVE-2010-5226

Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll, 2 whiptkwt.7.12.601.dll, or 3 xamlwt.7.6.0.dll file in the current working directory, as demonstrated by a directory that contains a .dwf...

CVE-2010-5226

Summary: CVE-2010-5226 affects Autodesk Design Review 2011 (version 11.0.0.86) and involves multiple untrusted search path vulnerabilities. The root cause is placing a Trojan horse through (1) dwmapi.dll, (2) whiptk_wt.7.12.601.dll, or (3) xaml_wt.7.6.0.dll in the current working directory, demon...

PT-2012-1437

Name of the Vulnerable Software and Affected Versions Autodesk Design Review version 11.0.0.86 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll, whiptk wt.7.12.601.dll, or xaml wt.7.6.0.dll file in the current working directory. This can be demonstrated by...

CVE-2010-5226: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Autodesk Design Review 2011 11.0.0.86 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll, 2 whiptkwt.7.12.601.dll, or 3 xamlwt.7.6.0.dll file in the current working directory, as demonstrated by a directory that contains a .dwf...

CVE-2008-4471

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...

Directory traversal

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...

CVE-2008-4472

The UpdateEngine class in the LiveUpdate ActiveX control LiveUpdate16.DLL 17.2.56, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method...

CVE-2008-4472: Undefined Security Weakness

The UpdateEngine class in the LiveUpdate ActiveX control LiveUpdate16.DLL 17.2.56, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute arbitrary programs via the second argument to the ApplyPatch method...

CVE-2008-4471: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...