CVE-2022-27871 - Vulnerability Details

Vendors	Products
Autodesk	3ds Max Advance Steel Autocad Autocad Architecture Autocad Civil 3d Autocad Electrical Autocad Lt Autocad Map 3d Autocad Mechanical Autocad Mep Autocad Plant 3d Design Review Navisworks Revit

Link	Providers
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks", "vendor": "n/a", "versions": [{"status": "affected", "version": "2022, 2021, 2020,2019"}]}], "descriptions": [{"lang": "en", "value": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code."}], "problemTypes": [{"descriptions": [{"description": "Heap-based Buffer Overflow vul", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-06-21T14:23:33", "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@autodesk.com", "ID": "CVE-2022-27871", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks", "version": {"version_data": [{"version_value": "2022, 2021, 2020,2019"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Heap-based Buffer Overflow vul"}]}]}, "references": {"reference_data": [{"name": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011", "refsource": "MISC", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T05:41:10.620Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011"}]}]}, "cveMetadata": {"assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "assignerShortName": "autodesk", "cveId": "CVE-2022-27871", "datePublished": "2022-06-21T14:23:33", "dateReserved": "2022-03-25T00:00:00", "dateUpdated": "2024-08-03T05:41:10.620Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Autodesk AutoCAD product suite, Revit, Design Review and Navisworks (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : 2022, 2021, 2020,2019 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Heap-based Buffer Overflow vul (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-06-21T14:23:33 (string)

orgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

shortName : autodesk (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@autodesk.com (string)

ID : CVE-2022-27871 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Autodesk AutoCAD product suite, Revit, Design Review and Navisworks (string)

version : { »

version_data : [ »

0 : { »

version_value : 2022, 2021, 2020,2019 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Heap-based Buffer Overflow vul (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

refsource : MISC (string)

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T05:41:10.620Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 7e40ea87-bc65-4944-9723-dd79dd760601 (string)

assignerShortName : autodesk (string)

cveId : CVE-2022-27871 (string)

datePublished : 2022-06-21T14:23:33 (string)

dateReserved : 2022-03-25T00:00:00 (string)

dateUpdated : 2024-08-03T05:41:10.620Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:3ds_max:2021:*:*:*:*:*:*:*", "matchCriteriaId": "88A89032-1BA1-4657-98F6-E2ECB19BB4E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:3ds_max:2022:*:*:*:*:*:*:*", "matchCriteriaId": "887292AA-AC0F-4931-B55B-5FAAA127E3D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:*", "matchCriteriaId": "963B02A8-97DE-4C10-9AE1-3DA4FBC9AF9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:*", "matchCriteriaId": "8C4543D1-94E4-4470-91BF-6F3141FD9DAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*", "matchCriteriaId": "AB44E46E-C1FF-4642-9F0D-FEE599F12508", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*", "matchCriteriaId": "FABA4668-B759-4EF8-B4F7-DD824A5BD38B", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*", "matchCriteriaId": "411DC826-735A-4BEB-84BE-9250F97F612E", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*", "matchCriteriaId": "E30E2562-D38E-4764-874E-5B2FCF5639E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*", "matchCriteriaId": "88B2C295-D091-4C1D-8285-4309967707BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*", "matchCriteriaId": "EACE09F2-A323-4E4B-9A35-4EBAE3864E6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:*", "matchCriteriaId": "68FC54D1-B4FC-404E-9742-72F8340FE3C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*", "matchCriteriaId": "9275E76C-2A79-462A-A9D3-D0B6BBCDD0CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:*", "matchCriteriaId": "B7DFA12E-48C5-47B9-BD9F-1AFACBF4E1EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*", "matchCriteriaId": "535A5D39-1C82-4301-9E5B-C9E0D75F38B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*", "matchCriteriaId": "316615EC-BC9F-4B6A-8163-EBECC480EFDE", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*", "matchCriteriaId": "AB3A878B-2142-404F-BCF4-BB508674C6C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:*", "matchCriteriaId": "64F2EC88-168D-4DD1-9ADA-3F9FA60D6E35", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*", "matchCriteriaId": "5D73C803-7567-4C1D-B62A-C3C52369022D", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*", "matchCriteriaId": "C5F77B03-3221-4564-B4FF-7BF7EEC1C5B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*", "matchCriteriaId": "A10DE5AF-1718-4899-9238-CFFDC72D05B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:*", "matchCriteriaId": "E388264D-D2D4-4BE4-9097-8F547D73ABE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*", "matchCriteriaId": "16611BAA-C200-4C8B-823F-1AB95F5E1317", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*", "matchCriteriaId": "E2DC5114-48D2-4D85-8E80-B4BCB0FD78F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*", "matchCriteriaId": "03682B7E-1CF1-4456-A51F-A6ADFC177935", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:*", "matchCriteriaId": "371C5F60-4959-40C7-93E1-A01510A95115", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*", "matchCriteriaId": "D83FB4C7-B374-4907-8E2B-EEE61C8339E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*", "matchCriteriaId": "601676EC-2EB4-45D0-B1AE-0980CBD68770", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:*", "matchCriteriaId": "4A2EF334-E4E2-40DA-BD51-B74EE1E0ACCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*", "matchCriteriaId": "04E05510-B21B-4DDD-88D7-CEB8963E1AFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:*", "matchCriteriaId": "D4CD010A-FDBC-40F9-95AC-0CD8388B85D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*", "matchCriteriaId": "FC99E0F3-AA11-4390-A7C0-5BBFCDA94E3F", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*", "matchCriteriaId": "33AA60CF-611C-45FC-92F8-7517D87B1645", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*", "matchCriteriaId": "19255CEC-6161-4D44-B87E-52E86DF4FBA7", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:*", "matchCriteriaId": "7147F378-DFB0-48A8-8B05-8777E1CC7F90", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*", "matchCriteriaId": "3B5C858C-4A01-4916-BE3E-B9056D67CF5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*", "matchCriteriaId": "7EB83A4A-D4C2-4509-BD49-15B9BBC7BF97", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*", "matchCriteriaId": "3F608B1C-BA96-4EA8-A540-83870262CBC1", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:*", "matchCriteriaId": "7CFAAD19-6248-42CB-B177-EC2E5141A953", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*", "matchCriteriaId": "1C52D90B-578B-4281-BF0E-B7CDA425ED05", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*", "matchCriteriaId": "4C8AD4F3-AA82-49F5-A18A-85127FDB8B95", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*", "matchCriteriaId": "4E536B0D-4C95-4589-981A-2F8A6C4B44DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:*", "matchCriteriaId": "3FBDD3AC-FA00-462F-AA13-5A75B5D50689", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*", "matchCriteriaId": "73E2E9E8-2269-4729-8D8F-3C26974F5FD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*", "matchCriteriaId": "452A1A75-C59A-43AB-9C43-BA49EB95C39C", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*", "matchCriteriaId": "213232B9-A40B-436D-A66A-B65C49D59BE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*", "matchCriteriaId": "F8EB8353-CA0F-4B38-9427-56C845696A7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:*", "matchCriteriaId": "3B3A9D11-51D7-4384-A6CF-B1AE46625E66", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:*", "matchCriteriaId": "8694D891-A923-4B62-A508-77E6EBC54646", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:2020:*:*:*:*:*:*:*", "matchCriteriaId": "8A183FC7-49B7-4475-A580-E87B68690997", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:2021:*:*:*:*:*:*:*", "matchCriteriaId": "E9CFAE69-D0D3-4850-8752-DD2DC3FF51CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*", "matchCriteriaId": "70FD96A0-AC16-4E51-B4C1-6BB14C2D905A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code."}, {"lang": "es", "value": "Las versiones del paquete de productos AutoCAD, Revit, Design Review y Navisworks que usan PDFTron versiones anteriores a 9.1.17, pueden escribir m\u00e1s all\u00e1 del b\u00fafer asignado mientras analizan los archivos PDF. Esta vulnerabilidad puede ser explotada para ejecutar c\u00f3digo arbitrario"}], "id": "CVE-2022-27871", "lastModified": "2024-11-21T06:56:22.103", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-06-21T15:15:08.863", "references": [{"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:autodesk:3ds_max:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 88A89032-1BA1-4657-98F6-E2ECB19BB4E6 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:autodesk:3ds_max:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 887292AA-AC0F-4931-B55B-5FAAA127E3D0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 963B02A8-97DE-4C10-9AE1-3DA4FBC9AF9F (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 8C4543D1-94E4-4470-91BF-6F3141FD9DAE (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : AB44E46E-C1FF-4642-9F0D-FEE599F12508 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : FABA4668-B759-4EF8-B4F7-DD824A5BD38B (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 411DC826-735A-4BEB-84BE-9250F97F612E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : E30E2562-D38E-4764-874E-5B2FCF5639E5 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 88B2C295-D091-4C1D-8285-4309967707BC (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : EACE09F2-A323-4E4B-9A35-4EBAE3864E6C (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:* (string)

matchCriteriaId : 68FC54D1-B4FC-404E-9742-72F8340FE3C7 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 9275E76C-2A79-462A-A9D3-D0B6BBCDD0CC (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : B7DFA12E-48C5-47B9-BD9F-1AFACBF4E1EA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 535A5D39-1C82-4301-9E5B-C9E0D75F38B9 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 316615EC-BC9F-4B6A-8163-EBECC480EFDE (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : AB3A878B-2142-404F-BCF4-BB508674C6C4 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 64F2EC88-168D-4DD1-9ADA-3F9FA60D6E35 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D73C803-7567-4C1D-B62A-C3C52369022D (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : C5F77B03-3221-4564-B4FF-7BF7EEC1C5B6 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : A10DE5AF-1718-4899-9238-CFFDC72D05B7 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : E388264D-D2D4-4BE4-9097-8F547D73ABE5 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 16611BAA-C200-4C8B-823F-1AB95F5E1317 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : E2DC5114-48D2-4D85-8E80-B4BCB0FD78F5 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 03682B7E-1CF1-4456-A51F-A6ADFC177935 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 371C5F60-4959-40C7-93E1-A01510A95115 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : D83FB4C7-B374-4907-8E2B-EEE61C8339E7 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 601676EC-2EB4-45D0-B1AE-0980CBD68770 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:* (string)

matchCriteriaId : 4A2EF334-E4E2-40DA-BD51-B74EE1E0ACCF (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 04E05510-B21B-4DDD-88D7-CEB8963E1AFB (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : D4CD010A-FDBC-40F9-95AC-0CD8388B85D1 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : FC99E0F3-AA11-4390-A7C0-5BBFCDA94E3F (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 33AA60CF-611C-45FC-92F8-7517D87B1645 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 19255CEC-6161-4D44-B87E-52E86DF4FBA7 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 7147F378-DFB0-48A8-8B05-8777E1CC7F90 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B5C858C-4A01-4916-BE3E-B9056D67CF5F (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 7EB83A4A-D4C2-4509-BD49-15B9BBC7BF97 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F608B1C-BA96-4EA8-A540-83870262CBC1 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CFAAD19-6248-42CB-B177-EC2E5141A953 (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C52D90B-578B-4281-BF0E-B7CDA425ED05 (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C8AD4F3-AA82-49F5-A18A-85127FDB8B95 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E536B0D-4C95-4589-981A-2F8A6C4B44DC (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 3FBDD3AC-FA00-462F-AA13-5A75B5D50689 (string)

vulnerable : true (boolean)

}

42 : { »

criteria : cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : 73E2E9E8-2269-4729-8D8F-3C26974F5FD2 (string)

vulnerable : true (boolean)

}

43 : { »

criteria : cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 452A1A75-C59A-43AB-9C43-BA49EB95C39C (string)

vulnerable : true (boolean)

}

44 : { »

criteria : cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:* (string)

matchCriteriaId : 213232B9-A40B-436D-A66A-B65C49D59BE6 (string)

vulnerable : true (boolean)

}

45 : { »

criteria : cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:* (string)

matchCriteriaId : F8EB8353-CA0F-4B38-9427-56C845696A7D (string)

vulnerable : true (boolean)

}

46 : { »

criteria : cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B3A9D11-51D7-4384-A6CF-B1AE46625E66 (string)

vulnerable : true (boolean)

}

47 : { »

criteria : cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 8694D891-A923-4B62-A508-77E6EBC54646 (string)

vulnerable : true (boolean)

}

48 : { »

criteria : cpe:2.3:a:autodesk:revit:2020:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A183FC7-49B7-4475-A580-E87B68690997 (string)

vulnerable : true (boolean)

}

49 : { »

criteria : cpe:2.3:a:autodesk:revit:2021:*:*:*:*:*:*:* (string)

matchCriteriaId : E9CFAE69-D0D3-4850-8752-DD2DC3FF51CA (string)

vulnerable : true (boolean)

}

50 : { »

criteria : cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:* (string)

matchCriteriaId : 70FD96A0-AC16-4E51-B4C1-6BB14C2D905A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code. (string)

}

1 : { »

lang : es (string)

value : Las versiones del paquete de productos AutoCAD, Revit, Design Review y Navisworks que usan PDFTron versiones anteriores a 9.1.17, pueden escribir más allá del búfer asignado mientras analizan los archivos PDF. Esta vulnerabilidad puede ser explotada para ejecutar código arbitrario (string)

}

]

id : CVE-2022-27871 (string)

lastModified : 2024-11-21T06:56:22.103 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 6.8 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:M/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 8.6 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : true (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-06-21T15:15:08.863 (string)

references : [ »

0 : { »

source : psirt@autodesk.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011 (string)

}

]

sourceIdentifier : psirt@autodesk.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-770 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object