Yüksek CVSS 7.8
CVE-2022-25788: Advance Steel: sınır dışı yazma
Açıklama (NVD)
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.
Özet bilgiler
- Ürün
- Autodesk Advance Steel
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %1,60 (yüzdelik 76)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| autodesk-advance-steel | 2022 | — | 2022.1.2 |
| autodesk-autocad | 2022 | — | 2022.1.2 |
| autodesk-autocad | 2022 | — | 2022.2.2 |
| autodesk-autocad-architecture | 2022 | — | 2022.1.2 |
| autodesk-autocad-electrical | 2022 | — | 2022.1.2 |
| autodesk-autocad-lt | 2022 | — | 2022.1.2 |
| autodesk-autocad-lt | 2022 | — | 2022.2.2 |
| autodesk-autocad-map-3d | 2022 | — | 2022.1.2 |
| autodesk-autocad-mechanical | 2022 | — | 2022.1.2 |
| autodesk-autocad-mep | 2022 | — | 2022.1.2 |
| autodesk-autocad-plant-3d | 2022 | — | 2022.1.2 |
| autodesk-civil-3d | 2022 | — | 2022.1.2 |
| autodesk-inventor | 2022 | — | 2022.2 |