CVE-2021-27037

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code...

CVE-2021-27037

Summary: CVE-2021-27037 affects Autodesk Design Review (multiple years). A maliciously crafted PNG, PDF or DWF file can trigger a use-after-free during parsing, enabling arbitrary code execution. Connected advisories corroborate remote code execution vectors requiring user action (e.g., opening a...

CVE-2021-27035

CVE-2021-27035 affects Autodesk Design Review 2011–2018 (pre-2018 hotfix 4). The issue occurs when parsing TIFF, PICT, TGA or DWF files, where reads beyond allocated boundaries can occur, potentially enabling code execution in the context of the affected process when combined with other vulnerabi...

CVE-2021-27035

A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code executio...

CVE-2021-27034

Gleaned from connected docs: CVE-2021-27034 affects Autodesk Design Review (versions prior to 2018 hotfix 4 as per Nessus adsk-sa-2021-0003) and involves a heap-based buffer overflow during parsing of PICT, PCX, RCL or TIFF files. The root cause is improper bounds/length validation in the parsing...

CVE-2021-27034

A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code...

CVE-2021-27033

CVE-2021-27033 is a Double Free vulnerability in Autodesk Design Review’s PDF parsing. Affected ADR versions (2011, 2012, 2013, 2017, 2018) can be exploited remotely by a user opening a malicious PDF/file or visiting a malicious page, leading to arbitrary code execution. The flaw stems from impro...

PublicCMS 跨站脚本漏洞

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A cross-site scripting vulnerability exists in PublicCMS. An attacker can exploit this vulnerability to obtain an administrator cookie when an administrator reviews a submission...

(0Day) Autodesk Design Review PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

PT-2021-22826 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review affected versions not specified Description: The issue arises when a maliciously crafted dwf or .pct file is consumed through the DesignReview.exe application, leading to a memory corruption vulnerability due to a read...

(0Day) Autodesk Design Review DWF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

(0Day) Autodesk Design Review DWFX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Autodesk Design Review Buffer Overflow Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.A buffer overflow vulnerability exists in Autodesk Design Review, which can be exploite...

Autodesk Design Review Resource Management Error Vulnerability (CNVD-2021-53946)

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a resource management error that could be...

Autodesk Design Review Resource Management Error Vulnerability (CNVD-2021-53948)

Autodesk Design Review ADR is a suite of AutoCAD drafting software support software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a resource management error that could be...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53947)

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53945)

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer overflow vulnerability, which could be...

Vulnerabilities fixed in Autodesk Design Review

Autodesk has fixed vulnerabilities in Design Review. The vulnerabilities allow a remote malicious person to execute arbitrary code under user privileges. Also, the vulnerabilities allow the malicious party to obtain obtain system information. To exploit the vulnerabilities the attacker must induc...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in the VMware Carbon Black App Control management server as well as VMware Tools for Windows, VMware Remote Console for Windows, and VMware App Volumes. An attacker could exploit these vulnerabilities to take control of an affected...

Autodesk Design Review 安全漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software support software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a type obfuscation vulnerability that could b...