Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD und Autodesk Civil 3D ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
Product
AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.
Autodesk Civil 3D ist eine Software für die Detailplanung und Dokumentation im Tief- und Infrastrukturbau.
Vulnerabilities 3
-
High 7.8
DGN File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of …
-
High 7.8
DGN File Parsing Uninitialized Variable Vulnerability
A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the c…
-
High 7.8
DGN File Parsing Memory Corruption Vulnerability
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Revision history
-
#2
Referenz(en) aufgenommen: ZDI-25-861, ZDI-CAN-27084, ZDI-25-862, ZDI-CAN-27085, ZDI-25-860, ZDI-CAN-27083
-
#1
Initiale Fassung
References
-
Autodesk Security Advisory adsk-sa-2025-0017 vom 2025-08-17
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0017