Buffer overflow in Autodesk products - CVE-2022-25795

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU61953

Buffer overflow in Autodesk products - CVE-2022-25795

Published: April 7, 2022 / Updated: April 8, 2022


Vulnerability identifier: #VU61953
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-25795
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A remote attacker can create a specially crafted PDF file, trick the victim into opening it, trigger memory corruption and cause a denial of service condition on the target system.


Affected software

DWG Trueview
AutoCAD Plant 3D
AutoCAD LT
AutoCAD MEP
Advance Steel
AutoCAD Mechanical
AutoCAD Electrical
AutoCAD Map 3D
AutoCAD Architecture
Autodesk Civil 3D
AutoCAD for Mac LT
AutoCAD for Mac
Autodesk AutoCAD
Autodesk Infraworks

How to mitigate CVE-2022-25795

Install updates from vendor's website.

DWG Trueview - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD Plant 3D - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD LT - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD MEP - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
Advance Steel - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD Mechanical - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD Electrical - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD Map 3D - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD Architecture - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
Autodesk Civil 3D - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
Autodesk AutoCAD - addressed in versions 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2
AutoCAD for Mac LT - addressed in versions 2020.3.2, 2021.2.2, 2022.2.2
AutoCAD for Mac - addressed in versions 2020.3.2, 2021.2.2, 2022.2.2
Autodesk Infraworks - addressed in versions 2020.2 Hotfix 6, 2021.2 Hotfix 6, 2022.1 Hotfix 4

External References

Related Security Bulletins