Lucene search
+L

85 matches found

CVE
CVE
added 2022/10/21 12:00 a.m.70 views

CVE-2022-42944

CVE-2022-42944 affects Autodesk Design Review’s DesignReview.exe. A maliciously crafted DWF or PCT file can trigger a memory corruption vulnerability via a read access violation, which in conjunction with other flaws could lead to code execution in the context of the current process. Several conn...

7.8CVSS7.8AI score0.0039EPSS
SaveExploits0References1Affected Software11
CVE
CVE
added 2022/10/21 12:00 a.m.73 views

CVE-2022-42941

CVE-2022-42941 affects Autodesk Design Review. A maliciously crafted DWF or PCT file consumed by DesignReview.exe can trigger a memory corruption via a read access violation, which in combination with other vulnerabilities could lead to code execution in the context of the current process. Connec...

7.8CVSS7.8AI score0.0039EPSS
SaveExploits0References1Affected Software11
CVE
CVE
added 2022/10/21 12:00 a.m.72 views

CVE-2022-42942

CVE-2022-42942 affects Autodesk Design Review/DesignReview.exe. A maliciously crafted DWG? DWF or .pct file can trigger memory corruption via a read access violation, which, in conjunction with other vulnerabilities, could lead to code execution in the current process. The vulnerability is descri...

7.8CVSS7.8AI score0.0039EPSS
SaveExploits0References1Affected Software11
CVE
CVE
added 2022/10/21 12:00 a.m.88 views

CVE-2022-42943

CVE-2022-42943 describes a memory corruption vulnerability in Autodesk Design Review’s DesignReview.exe triggered by a maliciously crafted .dwf/.pct file. The issue arises from a read access violation when parsing the file, and could lead to code execution in the context of the affected process. ...

7.8CVSS7.8AI score0.0039EPSS
SaveExploits0References1Affected Software11
Prion
Prion
added 2022/10/14 5:15 p.m.24 views

Memory corruption

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

4.4CVSS8AI score0.00414EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/14 12:00 a.m.63 views

CVE-2022-41306

CVE-2022-41306 describes memory corruption in Autodesk DesignReview.exe triggered by consuming a maliciously crafted PCT file. The vulnerability can lead to code execution in the context of the current process and is associated with a high impact (C, I, A) and local attack vector with user intera...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/14 12:00 a.m.9 views

PT-2022-25806 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: A maliciously crafted PCT file consumed through the DesignReview.exe application could lead to memory corruption by write access violation. This issue, in conjunction with other...

7.8CVSS7.8AI score0.00414EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.37 views

CVE-2022-41306

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

8.2AI score0.00414EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 12:00 a.m.12 views

CVE-2022-41306

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

8AI score0.00414EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/03 3:15 p.m.23 views

Memory corruption

A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

4.4CVSS7.8AI score0.00624EPSS
SaveExploits0References1Affected Software11
ATTACKERKB
ATTACKERKB
added 2022/04/18 5:15 p.m.4 views

CVE-2022-27525

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6.1AI score0.01644EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/25 8:15 p.m.7 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6AI score0.07734EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/25 8:15 p.m.6 views

CVE-2021-40167

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.2AI score0.07734EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/25 7:11 p.m.90 views

CVE-2021-40167

Autodesk Design Review is affected by CVE-2021-40167 through memory corruption in the DWF/.pct file parsing pathway, potentially enabling code execution. Multiple sources (NVD, ZDI, CNA/CNNVD) describe a vulnerability in the DesignReview.exe parser that can be triggered by maliciously crafted DWF...

7.8CVSS7.8AI score0.07734EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.7 views

The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to data writing beyond the buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and execute arbitrary code using a...

7.8CVSS7AI score0.01196EPSS
SaveExploits0References11Affected Software5
Zero Day Initiative
Zero Day Initiative
added 2021/07/19 12:00 a.m.55 views

Siemens JT2Go PCT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCT...

7.8CVSS4.2AI score0.01891EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/13 11:15 a.m.12 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS5.9AI score0.01891EPSS
SaveExploits0References2
NVD
NVD
added 2021/07/13 11:15 a.m.37 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS0.01891EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/13 11:15 a.m.8 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.8CVSS7.1AI score0.01891EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/07/13 11:03 a.m.42 views

CVE-2021-34318

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPloader.dll library in affected applications lacks proper validation of user-supplied data when parsing PCT files. This could result in an out of bounds write past the end of an...

7.9AI score0.01891EPSS
SaveExploits0References2
Rows per page
Query Builder