3414 matches found
CVE-2022-27873
CVE-2022-27873 affects Autodesk Fusion 360 through the document parser’s Insert SVG pathway. The affected component is the SVG insertion logic in Fusion 360, which can cause the application to initiate arbitrary HTTP requests and potentially disclose the victim’s public IP (and possibly other inf...
Autodesk Design Review 资源管理错误漏洞
Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A resource management error vulnerability exists in Autodesk Design Review. An attacke...
Autodesk Design Review 缓冲区错误漏洞
Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A security vulnerability exists in Autodesk Design Review. An attacker can exploit the...
PT-2022-18650 · Autodesk · Autodesk Design Review
Name of the Vulnerable Software and Affected Versions: Autodesk DesignReview affected versions not specified Description: A Double Free issue allows remote attackers to execute arbitrary code through the DesignReview.exe application on PDF files within affected installations. User interaction is...
Autodesk Desktop App Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Autodesk Desktop App. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
Autodesk Design Review 缓冲区错误漏洞
Autodesk Design Review ADR is a suite of AutoCAD drafting software assistance software from Autodesk. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files. A buffer error vulnerability exists in Autodesk Design Review. An attacker could explo...
PT-2022-21884 · Autodesk · Autodesk Desktop App
Name of the Vulnerable Software and Affected Versions: Autodesk Desktop App affected versions not specified Description: The issue allows an attacker to create an unintended sphere of control through a vulnerability in the file delete operation. This can be leveraged to escalate privileges and...
Autodesk Desktop App Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Autodesk Desktop App. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...
PT-2022-18658 · Autodesk · Autodesk Fusion 360
Name of the Vulnerable Software and Affected Versions: Autodesk Fusion 360 affected versions not specified Description: The issue allows an attacker to force a victim's device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360's document...
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...
PT-2022-21883 · Autodesk · Autodesk Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: The issue arises when parsing a maliciously crafted PRT file, which can cause Autodesk AutoCAD to read beyond allocated boundaries. This could potentially lead to code execution in the context of the...
Autodesk AutoCAD 缓冲区错误漏洞
Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from a boundary condition when parsing a PRT file. A remote attacker can create a specially crafted file and trick a...
Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...
Autodesk AutoCAD CATPart File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
Autodesk AutoCAD Buffer Error Vulnerability (CNVD-2022-61610)
Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from writing beyond the allocated buffer when parsing TGA files, and can be exploited by attackers to execute arbitrary code...
Autodesk AutoCAD Buffer Error Vulnerability (CNVD-2022-61611)
Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from the fact that when parsing TIFF files, an attacker could be forced to read or write beyond the allocated boundaries and could us...
Autodesk AutoCAD Resource Management Error Vulnerability (CNVD-2022-61612)
Autodesk AutoCAD is a professional 3D drawing software from Autodesk Inc. A security vulnerability exists in Autodesk AutoCAD version 2023, which can be exploited by attackers to execute arbitrary code...
Autodesk AutoCAD Resource Management Error Vulnerability
Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. Autodesk AutoCAD versions 2022, 2021, 2020 and 2019 have a security vulnerability that could be exploited by attackers to execute arbitrary code...
macOS Autodesk Fusion 360 < 2.0.12888 XXE (adsk-sa-2022-0013)
The version of Autodesk Fusion 360 installed on the remote macOS or Mac OS X host is prior to 2.0.12888. It is, therefore, affected by an XML external entity XXE vulnerability that can cause a victim to perform arbitrary HTTP requests when parsing a malicious SVG file. An unauthenticated, remote...