PT-2023-27819 · Autodesk · Autodesk Autocad

CVE-2023-41139

·

Publicado

2023-09-19

·

Atualizado

2023-11-30

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2023 through 2024
Description A maliciously crafted STP file can be used to dereference an untrusted pointer when parsed through the affected software. This issue could lead to code execution in the current process.
Recommendations For Autodesk AutoCAD versions 2023 and 2024, update to a version that includes a fix for the untrusted pointer dereference issue to prevent potential code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Untrusted Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-822

Identificadores relacionados

CVE-2023-41139
ZDI-23-1440

Produtos afetados

Autodesk Autocad