High WID-SEC-2023-2247 6 CVEs

Autodesk AutoCAD: Mehrere Schwachstellen

Published Aug 31, 2023 · Updated Sep 3, 2023 · Revision 2 · de-DE

Vendor: Autodesk Product: AutoCAD Product: AutoCAD < 2023.1.4 Product: AutoCAD < mac 2023.1 Product: AutoCAD < mac 2024.1 Platform: macOS Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und vertrauliche Informationen offenzulegen.

Product

AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.

Vulnerabilities 6

Critical 9.8

CVE-2023-29075

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023
Unscored —

CVE-2023-29073

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based B…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023
Unscored —

CVE-2023-29074

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bo…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023
Unscored —

CVE-2023-29076

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023
Unscored —

CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrust…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023
Unscored —

CVE-2023-41140

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buf…

Autodesk AutoCAD, Advance Steel and Civil 3D

Nov 23, 2023

Revision history

2023-09-03 #2
Produkte ergänzt
2023-08-31 #1
Initiale Fassung

References

Autodesk Security Advisory ADSK-SA-2023-0018 vom 2023-08-31
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018