CVE-2022-27871

Опубликовано: 21 июн. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Ссылки

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011
Vendor Advisory
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:autodesk:3ds_max:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:3ds_max:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:*

cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:*

cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*

cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:revit:2020:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:revit:2021:*:*:*:*:*:*:*

cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00367

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

GHSA-5gx4-f3wm-4qq2

CVSS3: 7.8

github

больше 3 лет назад

BDU:2022-05175

CVSS3: 8.8

fstec