Lucene search
+L

85 matches found

CVE
CVE
added 2022/10/21 12:0 a.m.66 views

CVE-2022-42941

CVE-2022-42941 affects Autodesk Design Review. A maliciously crafted DWF or PCT file consumed by DesignReview.exe can trigger a memory corruption via a read access violation, which in combination with other vulnerabilities could lead to code execution in the context of the current process. Connec...

7.8CVSS7.8AI score0.00374EPSS
Exploits0References1Affected Software11
Positive Technologies
Positive Technologies
added 2022/10/21 12:0 a.m.10 views

PT-2022-26671 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: A maliciously crafted dwf or .pct file consumed through the DesignReview.exe application could lead to a memory corruption issue due to a read access violation. This issue, when...

7.8CVSS7.7AI score0.00374EPSS
Exploits0References3
CVE
CVE
added 2022/10/21 12:0 a.m.60 views

CVE-2022-42944

CVE-2022-42944 affects Autodesk Design Review’s DesignReview.exe. A maliciously crafted DWF or PCT file can trigger a memory corruption vulnerability via a read access violation, which in conjunction with other flaws could lead to code execution in the context of the current process. Several conn...

7.8CVSS7.8AI score0.00374EPSS
Exploits0References1Affected Software11
CVE
CVE
added 2022/10/21 12:0 a.m.66 views

CVE-2022-42942

CVE-2022-42942 affects Autodesk Design Review/DesignReview.exe. A maliciously crafted DWG? DWF or .pct file can trigger memory corruption via a read access violation, which, in conjunction with other vulnerabilities, could lead to code execution in the current process. The vulnerability is descri...

7.8CVSS7.8AI score0.00374EPSS
Exploits0References1Affected Software11
Prion
Prion
added 2022/10/14 5:15 p.m.21 views

Memory corruption

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

4.4CVSS8AI score0.00397EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.11 views

CVE-2022-41306

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

8AI score0.00397EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/14 12:0 a.m.6 views

PT-2022-25806 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: A maliciously crafted PCT file consumed through the DesignReview.exe application could lead to memory corruption by write access violation. This issue, in conjunction with other...

7.8CVSS7.8AI score0.00397EPSS
Exploits0References4
CVE
CVE
added 2022/10/14 12:0 a.m.58 views

CVE-2022-41306

CVE-2022-41306 describes memory corruption in Autodesk DesignReview.exe triggered by consuming a maliciously crafted PCT file. The vulnerability can lead to code execution in the context of the current process and is associated with a high impact (C, I, A) and local attack vector with user intera...

7.8CVSS7.9AI score0.00397EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:0 a.m.30 views

CVE-2022-41306

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

8.2AI score0.00397EPSS
Exploits0References1
Prion
Prion
added 2022/10/03 3:15 p.m.19 views

Memory corruption

A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

4.4CVSS7.8AI score0.00624EPSS
Exploits0References1Affected Software11
ATTACKERKB
ATTACKERKB
added 2022/04/18 5:15 p.m.3 views

CVE-2022-27525

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6.1AI score0.01644EPSS
Exploits0References2
OSV
OSV
added 2022/01/25 8:15 p.m.4 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6AI score0.07734EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 8:15 p.m.3 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.2AI score0.07734EPSS
Exploits0References2
CVE
CVE
added 2022/01/25 7:11 p.m.87 views

CVE-2021-40167

Autodesk Design Review is affected by CVE-2021-40167 through memory corruption in the DWF/.pct file parsing pathway, potentially enabling code execution. Multiple sources (NVD, ZDI, CNA/CNNVD) describe a vulnerability in the DesignReview.exe parser that can be triggered by maliciously crafted DWF...

7.8CVSS7.8AI score0.07734EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.5 views

The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to data writing beyond the buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and execute arbitrary code using a...

7.8CVSS7AI score0.01196EPSS
Exploits0References11Affected Software5
Zero Day Initiative
Zero Day Initiative
added 2021/07/19 12:0 a.m.52 views

Siemens JT2Go PCT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCT...

7.8CVSS4.2AI score0.01793EPSS
Exploits0References2
OSV
OSV
added 2021/07/13 11:15 a.m.7 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS5.9AI score0.01793EPSS
Exploits0References2
NVD
NVD
added 2021/07/13 11:15 a.m.32 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS0.01793EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/13 11:15 a.m.5 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS7.1AI score0.01793EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/07/13 11:3 a.m.36 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.9AI score0.01793EPSS
Exploits0References2
Rows per page
Query Builder