A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
Weakness
The product does not handle or incorrectly handles an exceptional condition.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Advance_steel | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Advance_steel | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Advance_steel | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Advance_steel | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_architecture | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_architecture | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_architecture | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_architecture | Autodesk | 2022 (including) | 2022.0.1 (including) |
| Autocad_electrical | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_electrical | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_electrical | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_electrical | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_lt | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_lt | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_lt | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_lt | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_map_3d | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_map_3d | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_map_3d | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_map_3d | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_mechanical | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_mechanical | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_mechanical | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_mechanical | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_mep | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_mep | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_mep | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_mep | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Autocad_plant_3d | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Autocad_plant_3d | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Autocad_plant_3d | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Autocad_plant_3d | Autodesk | 2022 (including) | 2022.0.1 (excluding) |
| Civil_3d | Autodesk | 2019 (including) | 2019.1.3 (excluding) |
| Civil_3d | Autodesk | 2020 (including) | 2020.1.4 (excluding) |
| Civil_3d | Autodesk | 2021 (including) | 2021.1.1 (excluding) |
| Civil_3d | Autodesk | 2022 (including) | 2022.0.1 (excluding) |