PT-2017-14178

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation" error. This...

PT-2017-14182

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

PT-2017-14187

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. It is related to "Data from Faulting Address controls subseque...

PT-2017-14181

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation" error...

PT-2017-14186

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with BabaCAD4Image plugin version 1.3 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file. It is related to "Data from Faulting Address...

CVE-2017-15766: Improper Restriction of Operations within the Bounds of a Memory Buffer

IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address controls Branch Selection starting at...

PT-2017-14176

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address control...

PT-2017-14217

Name of the Vulnerable Software and Affected Versions XnView Classic for Windows version 2.43 Description The issue allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file. This is related to a "Data Execution Prevention Violation near NULL" error, which...

PT-2017-14177

Name of the Vulnerable Software and Affected Versions IrfanView versions 4.50 with CADImage plugin version 12.0.0.5 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file. This is related to "Data from Faulting Address...

KLA10082 LPE vulnerabilities in AutoCAD

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories - Exploitation Related products AutoCAD CVE list...

Autocad DWG-AC1021 Heap Corruption

AutoCAD is a software for computer-aided design CAD and technical drawing in 2D/3D, being one of the world leading CAD design tools. It is developed and sold by Autodesk, Inc. Title: AutoCAD DWG-AC1021 Heap Corruption CVE Name: CVE-2013-3665 Permalink:...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

Code injection

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

CVE-2013-3665

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

PT-2013-4555

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions through 2014 Autodesk AutoCAD LT versions through 2014 Autodesk DWG TrueView versions through 2014 Description The issue allows remote attackers to execute arbitrary code via a crafted DWG file. Recommendations For...

CVE-2013-3665: Undefined Security Weakness

Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file...

KLA10081 ACE vulnerability in Autodesk

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file. Original advisories Autodesk bulletin Exploitation Related products AutoCAD...

CVE-2010-5241

CVE-2010-5241 affects Autodesk AutoCAD 2010, where local users can gain privileges via untrusted search paths involving (1) dwmapi.dll or (2) IBFS32.DLL placed in the current working directory (demonstrated with a .dwg file). The connected records consistently cite the affected product and the tw...

CVE-2010-5241: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is...