// For flags

CVE-2022-27866

 

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Un archivo TIFF malicioso cuando se consume a través de la aplicación DesignReview.exe puede ser forzado a leer más allá de los límites asignados cuando se analiza el archivo TIFF. Esta vulnerabilidad, junto con otras, podría conducir a la ejecución de código en el contexto del proceso actual

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-03-25 CVE Reserved
  • 2022-07-29 CVE Published
  • 2024-02-19 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-125: Out-of-bounds Read
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2011
Search vendor "Autodesk" for product "Design Review" and version "2011"
-
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2012
Search vendor "Autodesk" for product "Design Review" and version "2012"
-
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2013
Search vendor "Autodesk" for product "Design Review" and version "2013"
-
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2017
Search vendor "Autodesk" for product "Design Review" and version "2017"
-
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
-
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
hotfix
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
hotfix2
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
hotfix3
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
hotfix4
Affected
Autodesk
Search vendor "Autodesk"
Design Review
Search vendor "Autodesk" for product "Design Review"
2018
Search vendor "Autodesk" for product "Design Review" and version "2018"
hotfix5
Affected