PT-2021-3517
CVE-2021-27034
·
تاريخ النشر
2021-01-29
·
تاريخ التحديث
2021-12-08
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Autodesk Design Review versions 2011 through 2018
Description
A heap-based buffer overflow could occur while parsing certain file formats, including PICT, PCX, RCL, or TIFF files. This issue can be exploited to execute arbitrary code. The vulnerability is related to the implementation of syntax analysis for PICT files and is associated with a buffer overflow in the heap, allowing a remote attacker to execute arbitrary code.
Recommendations
For Autodesk Design Review versions 2011 through 2018, update to a version that includes a fix for the heap-based buffer overflow vulnerability.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾