Autodesk Inventor JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...

Autodesk Inventor JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J...

Vulnerabilities fixed in Autodesk Inventor

Vulnerabilities have been fixed in Autodesk Inventor. The vulnerabilities potentially allow a malicious party to execute code execute code under the application's permissions. The malicious party must entice a victim to open a rogue file to do so. open. Autodesk has released updates to address th...

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

Information disclosure

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

Design/Logic Flaw

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

CVE-2021-40158

The CVE-2021-40158 entry maps to multiple ZDI advisories describing Autodesk AutoCAD JT file parsing vulnerabilities that can trigger out-of-bounds writes/reads and remote code execution. Affected product: Autodesk AutoCAD (JT file parsing path). Root cause: crafted JT data triggers boundary viol...

PT-2022-11194 · Autodesk · Autodesk Inventor

Name of the Vulnerable Software and Affected Versions: Autodesk Inventor versions 2019 through 2022 Description: The issue is related to an Information Disclosure vulnerability when parsing JT files, which, in conjunction with other vulnerabilities, may lead to code execution through maliciously...

PT-2022-11193 · Autodesk · Autodesk Inventor +1

Name of the Vulnerable Software and Affected Versions: Autodesk Inventor versions 2019 through 2022 AutoCAD version 2022 Description: A maliciously crafted JT file may cause the software to read beyond allocated boundaries when parsing the file. This issue, in conjunction with other...

CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-40159

CVE-2021-40159 affects Autodesk Inventor (JT file parsing) and can lead to remote code execution via crafted JT files. Public details from ZDI advisories describe use-after-free and stack-buffer issues in JT file parsing that allow code execution in the current process, often requiring user inter...

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

Autodesk Inventor 信息泄露漏洞

Autodesk Inventor is a computer-aided design application from the American company Autodesk. It is used for 3D mechanical design, simulation, display, and storage. An information disclosure vulnerability exists in Autodesk Inventor that stems from an exception in the product's parsing of JT files...

Autodesk Inventor 缓冲区错误漏洞

Autodesk Inventor is a computer-aided design application from the American company Autodesk. It is used for 3D mechanical design, simulation, display, and storage. A buffer error vulnerability exists in Autodesk Inventor that stems from an exception in the product's parsing of JT files. An attack...

Autodesk Navisworks Buffer Overflow Vulnerability (CNVD-2022-05701)

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. Autodesk Navisworks is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code...