mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-07-09 16:05:11 +00:00
362 lines
14 KiB
JSON
362 lines
14 KiB
JSON
{
|
|
"id": "CVE-2022-27871",
|
|
"sourceIdentifier": "psirt@autodesk.com",
|
|
"published": "2022-06-21T15:15:08.863",
|
|
"lastModified": "2024-11-21T06:56:22.103",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Las versiones del paquete de productos AutoCAD, Revit, Design Review y Navisworks que usan PDFTron versiones anteriores a 9.1.17, pueden escribir m\u00e1s all\u00e1 del b\u00fafer asignado mientras analizan los archivos PDF. Esta vulnerabilidad puede ser explotada para ejecutar c\u00f3digo arbitrario"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "REQUIRED",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH"
|
|
},
|
|
"exploitabilityScore": 1.8,
|
|
"impactScore": 5.9
|
|
}
|
|
],
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
|
|
"baseScore": 6.8,
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-770"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:3ds_max:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "88A89032-1BA1-4657-98F6-E2ECB19BB4E6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:3ds_max:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "887292AA-AC0F-4931-B55B-5FAAA127E3D0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "963B02A8-97DE-4C10-9AE1-3DA4FBC9AF9F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8C4543D1-94E4-4470-91BF-6F3141FD9DAE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AB44E46E-C1FF-4642-9F0D-FEE599F12508"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FABA4668-B759-4EF8-B4F7-DD824A5BD38B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "411DC826-735A-4BEB-84BE-9250F97F612E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E30E2562-D38E-4764-874E-5B2FCF5639E5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "88B2C295-D091-4C1D-8285-4309967707BC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EACE09F2-A323-4E4B-9A35-4EBAE3864E6C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:*",
|
|
"matchCriteriaId": "68FC54D1-B4FC-404E-9742-72F8340FE3C7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9275E76C-2A79-462A-A9D3-D0B6BBCDD0CC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B7DFA12E-48C5-47B9-BD9F-1AFACBF4E1EA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "535A5D39-1C82-4301-9E5B-C9E0D75F38B9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "316615EC-BC9F-4B6A-8163-EBECC480EFDE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AB3A878B-2142-404F-BCF4-BB508674C6C4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "64F2EC88-168D-4DD1-9ADA-3F9FA60D6E35"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5D73C803-7567-4C1D-B62A-C3C52369022D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C5F77B03-3221-4564-B4FF-7BF7EEC1C5B6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A10DE5AF-1718-4899-9238-CFFDC72D05B7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E388264D-D2D4-4BE4-9097-8F547D73ABE5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "16611BAA-C200-4C8B-823F-1AB95F5E1317"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E2DC5114-48D2-4D85-8E80-B4BCB0FD78F5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "03682B7E-1CF1-4456-A51F-A6ADFC177935"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "371C5F60-4959-40C7-93E1-A01510A95115"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D83FB4C7-B374-4907-8E2B-EEE61C8339E7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "601676EC-2EB4-45D0-B1AE-0980CBD68770"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:*",
|
|
"matchCriteriaId": "4A2EF334-E4E2-40DA-BD51-B74EE1E0ACCF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "04E05510-B21B-4DDD-88D7-CEB8963E1AFB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D4CD010A-FDBC-40F9-95AC-0CD8388B85D1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FC99E0F3-AA11-4390-A7C0-5BBFCDA94E3F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "33AA60CF-611C-45FC-92F8-7517D87B1645"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "19255CEC-6161-4D44-B87E-52E86DF4FBA7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7147F378-DFB0-48A8-8B05-8777E1CC7F90"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3B5C858C-4A01-4916-BE3E-B9056D67CF5F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7EB83A4A-D4C2-4509-BD49-15B9BBC7BF97"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3F608B1C-BA96-4EA8-A540-83870262CBC1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7CFAAD19-6248-42CB-B177-EC2E5141A953"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1C52D90B-578B-4281-BF0E-B7CDA425ED05"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4C8AD4F3-AA82-49F5-A18A-85127FDB8B95"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4E536B0D-4C95-4589-981A-2F8A6C4B44DC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3FBDD3AC-FA00-462F-AA13-5A75B5D50689"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "73E2E9E8-2269-4729-8D8F-3C26974F5FD2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "452A1A75-C59A-43AB-9C43-BA49EB95C39C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*",
|
|
"matchCriteriaId": "213232B9-A40B-436D-A66A-B65C49D59BE6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F8EB8353-CA0F-4B38-9427-56C845696A7D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3B3A9D11-51D7-4384-A6CF-B1AE46625E66"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8694D891-A923-4B62-A508-77E6EBC54646"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:revit:2020:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8A183FC7-49B7-4475-A580-E87B68690997"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:revit:2021:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E9CFAE69-D0D3-4850-8752-DD2DC3FF51CA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "70FD96A0-AC16-4E51-B4C1-6BB14C2D905A"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011",
|
|
"source": "psirt@autodesk.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |