CVE-2021-27040
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD
Description
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
Affected (43)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2019 to 2019.1.3 | |
| From 2022 to 2022.1.1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 4.04e |
References (10)
Source: psirt@autodesk.com
Vendor Advisory
Source: psirt@autodesk.com
Third Party AdvisoryVDB Entry
Source: psirt@autodesk.com
Third Party AdvisoryVDB Entry
Source: psirt@autodesk.com
Third Party AdvisoryVDB Entry
Source: psirt@autodesk.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Timeline
No history available yet.