CVE-2023-29074: Autodesk AutoCAD, Advance Steel and Civil 3D, грешка в

Описание

Оригинално описание

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Засегнати продукти

• Autodesk AutoCAD, Advance Steel and Civil 3D: 2024, 2023

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в Autodesk AutoCAD, Advance Steel and Civil 3D

• CVE-2023-41140
• CVE-2023-41139
• CVE-2023-29076
• 9.8CVE-2023-29075
• CVE-2023-29073

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-29074
• https://nvd.nist.gov/vuln/detail/CVE-2023-29074
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018