CVE-2021-40163
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.
Affected (88)
Products: Autodesk: Autocad, Autocad Advance Steel, Autocad Architecture, Autocad Civil 3d, Autocad Electrical, Autocad Lt, Autocad Map 3d, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Design Review, Dwg Trueview, Fusion, Infrastructure Parts Editor, Infraworks, Inventor, Navisworks, Revit, Storm And Sanitary Analysis
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| 2019 ≤ version < 2019.1.4 | |
| Version 2018 | |
| 2019 ≤ version < 2019.1.4 | |
| 2.0.10356 ≤ version < 2.0.11405 | |
| 2019 ≤ version < 2019.2.2 | |
| 2019 ≤ version < 2019.3 | |
| 2019 ≤ version < 2019.6 | |
| 2019 ≤ version < 2019.7 | |
| 2019 ≤ version < 2019.2.4 | |
| 2020 ≤ version < 2020.3.1 |
References (2)
Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.