Foxit PhantomPDF Dwg2Pdf DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

CVE-2019-7358

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7359

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7360

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

Design/Logic Flaw

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

Heap overflow

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

Heap overflow

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7358

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7358

CVE-2019-7358 is a heap-overflow vulnerability in the DXF-parsing code used by Autodesk AutoCAD 2018 and related 2018 products (Advance Steel, Architecture, Electrical, Map 3D, Mechanical, MEP, P&ID, Plant 3D, LT, Civil 3D). The flaw arises in the DXF parser when handling 310 group data: the code...

CVE-2019-7360

CVE-2019-7360 describes an exploitable use-after-free in the DXF-parsing logic of Autodesk AutoCAD 2018 family (Advance Steel, AutoCAD, Civil 3D, etc.). The root cause is a memory-management flaw in the LinetypeTableRecord handling: when the file indicates a zero-length Elements field, an allocat...

CVE-2019-7360

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

CVE-2019-7358: Out-of-bounds Write

An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

PT-2019-18561

Name of the Vulnerable Software and Affected Versions Autodesk Advance Steel version 2018 Autodesk AutoCAD version 2018 Autodesk AutoCAD Architecture version 2018 Autodesk AutoCAD Electrical version 2018 Autodesk AutoCAD Map 3D version 2018 Autodesk AutoCAD Mechanical version 2018 Autodesk AutoCA...

CVE-2019-7359: Out-of-bounds Write

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

PT-2019-18560

Name of the Vulnerable Software and Affected Versions Autodesk Advance Steel version 2018 Autodesk AutoCAD version 2018 Autodesk AutoCAD Architecture version 2018 Autodesk AutoCAD Electrical version 2018 Autodesk AutoCAD Map 3D version 2018 Autodesk AutoCAD Mechanical version 2018 Autodesk AutoCA...

PT-2019-18559

Name of the Vulnerable Software and Affected Versions Autodesk Advance Steel version 2018 Autodesk AutoCAD version 2018 Autodesk AutoCAD Architecture version 2018 Autodesk AutoCAD Electrical version 2018 Autodesk AutoCAD Map 3D version 2018 Autodesk AutoCAD Mechanical version 2018 Autodesk AutoCA...

CVE-2019-7360: Use After Free

An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018,...

PT-2019-19869

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description A heap-based buffer over-read issue exists in the dwg dxf LTYPE function at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, consider disabling the dwg dxf LTYPE...

PT-2019-19870

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LTYPE at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645, as a...

PT-2019-19863

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions 0.7 through 0.7.1645 Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg dxf LEADER at dwg.spec. Recommendations For GNU LibreDWG versions 0.7 through 0.7.1645,...