Lucene search
+L

95 matches found

NVD
NVD
•added 2022/12/19 4:15 p.m.•30 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

7.8CVSS0.00265EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/12/19 12:00 a.m.•11 views

Autodesk DWG TrueView 代码问题漏洞

Autodesk DWG TrueView is an application from the American company Autodesk. It is used to view and convert 2D and 3D DWG files for free. A security vulnerability exists in Autodesk DWG TrueView version 2023, which originates from a DLL search command hijacking that can be exploited by a malicious...

7.8CVSS8.2AI score0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/19 12:00 a.m.•13 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

7.7AI score0.00265EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/12/19 12:00 a.m.•14 views

PT-2022-26672 · Autodesk · Dwg Trueview

Name of the Vulnerable Software and Affected Versions: DWG TrueViewTM version 2023 Description: The issue is related to a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system. Recommendations: For DWG...

7.8CVSS7.7AI score0.00265EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/19 12:00 a.m.•93 views

CVE-2022-42945

DWG TrueView 2023 contains a DLL search order hijacking vulnerability leading to remote code execution (CVE-2022-42945). Root cause: DLL search order manipulation. Affected product: Autodesk DWG TrueView 2023. Evidence from multiple sources confirms the issue; exploitation is described as remote ...

7.8CVSS7.9AI score0.00265EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/12/19 12:00 a.m.•43 views

CVE-2022-42945

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system...

8.2AI score0.00265EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/06/02 12:00 a.m.•12 views

The vulnerability of the software for opening, viewing, printing, and transforming DWG TrueView file drawings lies in the writing beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the software for opening, viewing, printing, and transforming DWG drawing files in TrueView is related to writing beyond the buffer boundaries in memory during DWG file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...

9.3CVSS7.9AI score0.01167EPSS
SaveExploits0References4Affected Software2
attackerkb
attackerkb
•added 2022/04/13 6:15 p.m.•9 views

CVE-2022-27523

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

7.1CVSS6.2AI score0.01437EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/13 6:15 p.m.•15 views

CVE-2022-27524

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the...

7.1CVSS6AI score0.01437EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/13 6:15 p.m.•27 views

CVE-2022-27524

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the...

7.1CVSS0.01437EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/13 6:15 p.m.•16 views

CVE-2022-27523

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

7.1CVSS6.2AI score0.01437EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/13 6:15 p.m.•35 views

CVE-2022-27523

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

7.1CVSS0.01437EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/13 6:15 p.m.•10 views

CVE-2022-27524

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the...

7.1CVSS6.1AI score0.01437EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/13 6:15 p.m.•10 views

CVE-2022-25795

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files...

7.8CVSS7.6AI score0.01944EPSS
SaveExploits0References5
OSV
OSV
•added 2022/04/13 6:15 p.m.•18 views

CVE-2022-25795

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files...

7.8CVSS6.3AI score0.01944EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/13 6:15 p.m.•48 views

CVE-2022-25795

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files...

7.8CVSS0.01944EPSS
SaveExploits0References2
Prion
Prion
•added 2022/04/13 6:15 p.m.•26 views

Input validation

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the...

5.8CVSS7.1AI score0.01437EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/04/13 6:15 p.m.•26 views

Memory corruption

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files...

6.8CVSS7.7AI score0.01944EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/04/13 6:15 p.m.•26 views

Input validation

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curre...

5.8CVSS7.2AI score0.01437EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/13 5:06 p.m.•94 views

CVE-2022-27524

CVE-2022-27524 concerns Autodesk TrueView 2022, where an out-of-bounds read vulnerability occurs while processing a maliciously crafted DWG file. The issue may lead to exposure of sensitive information or a crash, and, in conjunction with other vulnerabilities, could result in code execution in t...

7.1CVSS7AI score0.01437EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder