Skip to content
OpenAdvisories
Medium WID-SEC-2023-1211 3 CVEs

Autodesk Produkte: Mehrere Schwachstellen ermöglichen Codeausführung

Published May 14, 2023 · Updated May 14, 2023 · de-DE

Vendor: Autodesk Product: AutoCAD Product: AutoCAD < 2020.1.6 Product: AutoCAD < 2021.1.3 Product: AutoCAD < 2022.1.3 Product: AutoCAD < 2023.1.1 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Autodesk Produkten ausnutzen, um beliebigen Programmcode auszuführen.

Product

AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.

Vulnerabilities 3

  • Unscored —
    CVE-2023-25003

    A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read…

  • Unscored —
    CVE-2023-25004

    A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Explo…

  • Unscored —
    CVE-2023-29068

    A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vu…

Revision history

  1. #1

    Initiale Fassung

References