PT-2022-17520
CVE-2022-25792
·
تاريخ النشر
2022-03-07
·
تاريخ التحديث
2022-04-19
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Autodesk AutoCAD versions 2019 through 2022
Autodesk Navisworks versions 2020 through 2022
Description
A maliciously crafted file can be used to write beyond the allocated buffer, potentially allowing for the execution of arbitrary code through a buffer overflow issue.
Recommendations
For Autodesk AutoCAD versions 2019 through 2022, update to a version that includes a fix for the buffer overflow vulnerability.
For Autodesk Navisworks versions 2020 through 2022, update to a version that includes a fix for the buffer overflow vulnerability.
As a temporary workaround, consider restricting the use of potentially vulnerable file parsing functions until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾