Memory Corruption Vulnerability in Autodesk Design Review Software
CVE-2022-42935

7.8HIGH

Key Information:

Vendor

Autodesk

Vendor
CVE Published:
21 October 2022

What is CVE-2022-42935?

A vulnerability exists in Autodesk Design Review software which allows an attacker to craft malicious .dwf or .pct files. When processed by the DesignReview.exe application, this could cause a memory corruption issue due to a write access violation. Exploiting this vulnerability along with other vulnerabilities may allow unauthorized code execution within the context of the affected process.

Affected Version(s)

Autodesk Design Review 2018, 2017, 2013, 2012, 2011

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.