A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2022, 20:38
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-125 | |
| CPE | cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2017:-:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2013:-:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2012:-:*:*:*:*:*:* cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009 - Vendor Advisory |
29 Jul 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-29 20:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-27866
Mitre link : CVE-2022-27866
CVE.ORG link : CVE-2022-27866
JSON object : View
Products Affected
autodesk
- design_review
CWE
CWE-125
Out-of-bounds Read