CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2021-27034 – Autodesk Design Review TGA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-27034
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code. Podría producirse un desbordamiento del búfer basado en la pila mientras se analizan archivos PICT, PCX, RCL o TIFF en Autodesk Design Review 2018, 2017, 2013, 2012, 2011. Esta vulnerabilidad puede ser explotada para ejecutar código arbitrario. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk Design Review. • https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003 https://www.zerodayinitiative.com/advisories/ZDI-21-1125 https://www.zerodayinitiative.com/advisories/ZDI-21-1126 https://www.zerodayinitiative.com/advisories/ZDI-21-1127 https://www.zerodayinitiative.com/advisories/ZDI-21-1128 https://www.zerodayinitiative.com/advisories/ZDI-21-1129 https://www.zerodayinitiative.com/advisories/ZDI-21-1130 https://www.zerodayinitiative.com/advisories/ZDI-21-1131 https://www.zerodayinitiative.com/adviso • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0CVE-2021-27033 – Autodesk Design Review PDF File Parsing Double Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-27033
A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Una vulnerabilidad Double Free permite a los atacantes remotos ejecutar código arbitrario en archivos PDF dentro de las instalaciones afectadas de Autodesk Design Review 2018, 2017, 2013, 2012, 2011. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. • https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 • CWE-415: Double Free •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2021-27039 – Autodesk Design Review TIF File Parsing Uninitialized Variable Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-27039
A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code. Un archivo TIFF y PCX malicioso puede ser forzado a leer y escribir más allá de los límites asignados cuando se analiza el archivo TIFF y PCX para el desbordamiento basado. Esta vulnerabilidad puede ser explotada para ejecutar código arbitrario This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Design Review. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. • https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2019-7363
https://notcve.org/view.php?id=CVE-2019-7363
Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution. Una vulnerabilidad de uso de la memoria previamente liberada en las versiones 2011, 2012, 2013 y 2018 de Autodesk Design Review. Un atacante puede engañar a un usuario para que abra un archivo DWF malicioso que puede aprovechar una vulnerabilidad de uso libre posterior, que puede provocar la ejecución del código. • https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2019-7362
https://notcve.org/view.php?id=CVE-2019-7362
DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution. Vulnerabilidad de precarga de DLL en las versiones 2011, 2012, 2013 y 2018 de Autodesk Design Review. Un atacante puede engañar a un usuario para que abra un archivo DWF malicioso que puede aprovechar una vulnerabilidad de precarga de DLL, que puede provocar la ejecución del código. • https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 • CWE-427: Uncontrolled Search Path Element •