CVE-2019-7358
An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may cause a heap overflow, resulting in code execution.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - psirt@autodesk.com
- Published
- 2019-04-09
- Last modified
- 2024-08-04
- Weaknesses
- CWE-787
Affected products
- Advance Steel (Autodesk)
- Autocad (Autodesk)
- Autocad Architecture (Autodesk)
- Autocad Electrical (Autodesk)
- Autocad Lt (Autodesk)
- Autocad Map 3d (Autodesk)
- Autocad Mechanical (Autodesk)
- Autocad Mep (Autodesk)
- Autocad P&id (Autodesk)
- Autocad Plant 3d (Autodesk)
- Autodesk Advance Steel (Autodesk)
- Autodesk Autocad (Autodesk)
- Autodesk Autocad Architecture (Autodesk)
- Autodesk Autocad Electrical (Autodesk)
- Autodesk Autocad Lt (Autodesk)
- Autodesk Autocad Map 3d (Autodesk)
- Autodesk Autocad Mechanical (Autodesk)
- Autodesk Autocad Mep (Autodesk)
- Autodesk Autocad Pid (Autodesk)
- Autodesk Autocad Plant 3d (Autodesk)
- Autodesk Civil 3d (Autodesk)
- Civil 3d (Autodesk)
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001
