Arbitrary Code Execution Vulnerability in Autodesk Navisworks
CVE-2021-27045

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Autodesk Navisworks
Vendor
CVE Published:
15 September 2021

Summary

A vulnerability exists in Autodesk Navisworks 2019, 2020, 2021, and 2022 that allows a maliciously crafted PDF file to cause the application to read beyond its allocated memory boundaries. This situation poses a significant risk as it can be exploited by attackers to execute arbitrary code, potentially leading to unauthorized access and control over the affected systems.

Affected Version(s)

Autodesk Navisworks 2019, 2020, 2021, 2022

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.