Описание
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.1.2 (исключая)Версия от 2022 (включая) до 2022.2 (исключая)
Одно из
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:inventor:2019:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:inventor:2020:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:inventor:2021:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00443
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 7.8
github
почти 4 года назад
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability can be exploited to execute arbitrary code
EPSS
Процентиль: 63%
0.00443
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-125