Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk AutoCAD version 2023, which originates from a memory corruption vulnerability caused by a read access conflict when parsing a maliciously crafted X...

PT-2023-21413 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: A maliciously crafted X B file can cause an Integer Overflow when parsed through the software. This can be leveraged by a malicious actor to cause a crash, read sensitive data, or execute arbitrary...

CVE-2023-27915

CVE-2023-27915 affects Autodesk AutoCAD 2023 via a crafted X_B file that triggers a memory corruption (read access violation) in parsing, potentially enabling code execution in the current process. The vulnerability is tied to how X_B data is parsed and is supported by multiple feeds, including R...

CVE-2023-27913

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2023-29067

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-27914

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the...

CVE-2023-27913

The CVE-2023-27913 issue affects Autodesk AutoCAD 2023 where parsing a malicious X_B file can trigger an integer overflow, potentially crashing the process, exposing data, or allowing code execution. Root cause: overflow during parsing of the X_B input. Affected product/variant: Autodesk AutoCAD ...

CVE-2023-27912

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...

PT-2023-22124 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: A maliciously crafted X B file, when parsed, could lead to memory corruption by write access violation. This issue, in conjunction with other vulnerabilities, could potentially lead to code execution...

Autodesk AutoCAD 输入验证错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD version 2023, which originates from a maliciously crafted XB file that causes an integer overflow when parsed. An attacker can exploit this...

Vulnerabilities fixed in Autodesk AutoCad

Autodesk has fixed vulnerabilities in AutoCad. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or possibly execute code with user privileges. This requires the malicious party to trick the victim into opening a rogue XB file to open. Autodesk has released updates...

SUSE CVE-2017-15765

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...

The vulnerability of software for opening, viewing, printing, and transforming DWG and DXF format files arises from operations that go beyond buffer boundaries in memory. This allows attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the software for opening, viewing, printing, and transforming DWG and DXF files in the DWG TrueView format arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the...

Autodesk AutoCAD Multiple Vulnerabilities (adsk-sa-2022-0021)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2020.1.6, 2021.1.3, 2022.1.3 or 2023.1.1. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023,...

[SECURITY] Fedora 35 Update: admesh-0.98.5-1.fc35

ADMesh is a program for diagnosing and/or repairing commonly encountered problems with STL STereo Lithography data files. It can remove degenerate and unconnected facets, connect nearby facets, fill holes by adding facets, and repair facet normals. Simple transformations such as scaling,...

Fedora: Security Advisory for admesh (FEDORA-2022-47e298b59f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD, which originates when a maliciously crafted PKT file is used via the SubassemblyComposer.exe application, which may result in memory...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD, which originates when a maliciously crafted PKT file is used via the SubassemblyComposer.exe application, which may result in memory...

CVE-2022-41190

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41189

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...