PT-2022-17518
CVE-2022-25790
·
تاريخ النشر
2022-03-07
·
تاريخ التحديث
2022-04-19
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Autodesk AutoCAD versions 2019 through 2022
Autodesk Navisworks versions 2022
Description
The issue arises from a maliciously crafted DWF file that can be used to write beyond the allocated boundaries when parsing the DWF files, potentially leading to code execution.
Recommendations
For Autodesk AutoCAD versions 2019 through 2022, update to a version that includes the fix for this issue.
For Autodesk Navisworks version 2022, update to a version that includes the fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾