A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 | Vendor Advisory |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 - Vendor Advisory |
07 Oct 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. |
21 Apr 2022, 02:00
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
| CWE | CWE-787 | |
| References | (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 - Vendor Advisory | |
| CPE | cpe:2.3:a:autodesk:dwg_trueview:2021:*:*:*:*:*:*:* cpe:2.3:a:autodesk:dwg_trueview:2022:*:*:*:*:*:*:* |
13 Apr 2022, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-13 18:15
Updated : 2024-11-21 06:53
NVD link : CVE-2022-25797
Mitre link : CVE-2022-25797
CVE.ORG link : CVE-2022-25797
JSON object : View
Products Affected
autodesk
- dwg_trueview
CWE
CWE-787
Out-of-bounds Write