WID-SEC-W-2023-0950

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Autodesk AutoCAD: Mehrere Schwachstellen

view advisory published 2023-04-12

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD ausnutzen, um einen Absturz zu verursachen, sensible Daten zu lesen oder beliebigen Code im Kontext des aktuellen Prozesses auszuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2023-29067UShigh7.8—
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunctio…
CVE-2023-27915UShigh7.8—
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction…
CVE-2023-27914UShigh7.8—
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can l…
CVE-2023-27913UShigh7.8—
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a cr…
CVE-2023-27912UShigh7.8—
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or rea…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan