PT-2022-18467

CVE-2022-27528

·

Published

2022-04-05

·

Updated

2022-04-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autodesk Navisworks version 2022
Description The issue is related to a use-after-free vulnerability that can be triggered by maliciously crafted DWFX and SKP files in Autodesk Navisworks. Exploitation of this issue may lead to code execution.
Recommendations For Autodesk Navisworks version 2022, update the software to a version that includes a fix for the use-after-free vulnerability in DWFX and SKP file parsing. As a temporary workaround, consider restricting the opening of DWFX and SKP files from untrusted sources to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-22-557
ZDI-22-566
ZDI-22-568
Found an issue in the description? Have something to add? Feel free to write us 👾