PT-2022-17516

CVE-2022-25789

·

تاريخ النشر

2022-03-07

·

تاريخ التحديث

2022-04-19

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022
Description A maliciously crafted DWF, 3DS, and DWFX files can be used to trigger a use-after-free issue. Exploitation of this issue may lead to code execution.
Recommendations For Autodesk AutoCAD version 2019, update to a fixed version or apply the recommended patch to resolve the issue. For Autodesk AutoCAD version 2020, update to a fixed version or apply the recommended patch to resolve the issue. For Autodesk AutoCAD version 2021, update to a fixed version or apply the recommended patch to resolve the issue. For Autodesk AutoCAD version 2022, update to a fixed version or apply the recommended patch to resolve the issue. As a temporary workaround, consider disabling the processing of DWF, 3DS, and DWFX files until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ZDI-22-461
ZDI-22-465
ZDI-22-471
ZDI-22-477
ZDI-22-571
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾