Skip to content
OpenAdvisories
Unscored CVE-2019-7359 EUVD-2019-16901GHSA-m54w-j3mh-r5p3

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodes…

Published Apr 9, 2019 · Updated Aug 4, 2024 · Assigned by autodesk

Description

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.

Affected products

VendorProductAffectedFixed
Autodesk Autodesk Advance Steel 2018 —
Autodesk Autodesk AutoCAD 2018 —
Autodesk Autodesk AutoCAD Architecture 2018 —
Autodesk Autodesk AutoCAD Electrical 2018 —
Autodesk Autodesk AutoCAD Map 3D 2018 —
Autodesk Autodesk AutoCAD Mechanical 2018 —
Autodesk Autodesk AutoCAD MEP 2018 —
Autodesk Autodesk AutoCAD P&ID 2018 —
Autodesk Autodesk AutoCAD Plant 3D 2018 —
Autodesk Autodesk AutoCAD LT 2018 —
Autodesk Autodesk Civil 3D 2018 —

References