CVE-2022-27866
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Un archivo TIFF malicioso cuando se consume a través de la aplicación DesignReview.exe puede ser forzado a leer más allá de los límites asignados cuando se analiza el archivo TIFF. Esta vulnerabilidad, junto con otras, podría conducir a la ejecución de código en el contexto del proceso actual
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-25 CVE Reserved
- 2022-07-29 CVE Published
- 2024-02-19 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009 | 2022-08-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2011 Search vendor "Autodesk" for product "Design Review" and version "2011" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2012 Search vendor "Autodesk" for product "Design Review" and version "2012" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2013 Search vendor "Autodesk" for product "Design Review" and version "2013" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2017 Search vendor "Autodesk" for product "Design Review" and version "2017" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | - |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | hotfix |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | hotfix2 |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | hotfix3 |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | hotfix4 |
Affected
| ||||||
| Autodesk Search vendor "Autodesk" | Design Review Search vendor "Autodesk" for product "Design Review" | 2018 Search vendor "Autodesk" for product "Design Review" and version "2018" | hotfix5 |
Affected
| ||||||