mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
246 lines
9.5 KiB
JSON
246 lines
9.5 KiB
JSON
{
|
|
"id": "CVE-2022-33889",
|
|
"sourceIdentifier": "psirt@autodesk.com",
|
|
"published": "2022-10-03T15:15:17.633",
|
|
"lastModified": "2022-10-05T13:21:50.967",
|
|
"vulnStatus": "Analyzed",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Un archivo GIF o JPEG dise\u00f1ado de forma maliciosa cuando es analizado mediante Autodesk Design Review versi\u00f3n 2018 y AutoCAD versiones 2023 y 2022, podr\u00eda usarse para escribir m\u00e1s all\u00e1 del b\u00fafer de la pila asignado. Esta vulnerabilidad podr\u00eda conllevar a una ejecuci\u00f3n de c\u00f3digo arbitrario"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "REQUIRED",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH"
|
|
},
|
|
"exploitabilityScore": 1.8,
|
|
"impactScore": 5.9
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-787"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "F867A29B-ABEA-40D8-9252-9129DBC4EEEC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "480910B3-5FD0-47EF-98BA-FDFE22945BB0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "354E7B7A-22BA-4EB2-B136-9622A8032167"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "91A206DF-6922-4CF8-9481-E6A4A2953753"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "B0381CFD-48B1-4BA4-9961-64544267F852"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "729710F9-F4F9-4466-8FA2-22A0C0CF9420"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "3CEE7EBE-109D-43EC-9411-8169E589670A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "F1C62E65-FD27-478A-A472-FBDA4C751BB5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "AF33C631-4C2E-4A18-B5E8-A2037BF29196"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "F1A13743-F25B-47BC-902A-E7ADB9ACA577"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "42E5B8D3-9B23-4DC0-B7CE-BB7EC8D981F0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "20E3E3AA-051D-44E2-BD4A-8EBFCFD11C8C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "2ACB4E3C-FE40-4416-8484-A3A3B6883286"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "AA7C36AC-ED97-4669-AD61-75AA00F0385C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "E3107206-44ED-45CB-A218-AC8E12CD4409"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "1F4ADAD1-5627-4BD2-A72B-DEC95415261F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "C3357899-6803-4D09-94F0-7A633DB05E85"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "7FDA3E45-B980-4715-80CC-C29B4A3900C3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2022.1.3",
|
|
"matchCriteriaId": "9AC1E832-B725-4F72-812F-000ADE262DEA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "2023.0.0",
|
|
"versionEndExcluding": "2023.1.1",
|
|
"matchCriteriaId": "0A20490C-CDFD-4FCE-B5E3-1F2F78A0C531"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "2018",
|
|
"matchCriteriaId": "376B6A4F-8AF5-4D6E-B39C-2E99F7A81BCD"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*",
|
|
"matchCriteriaId": "213232B9-A40B-436D-A66A-B65C49D59BE6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2D0CF4DC-ACA5-41D0-B28E-CEB5D2C96F71"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*",
|
|
"matchCriteriaId": "84ED1789-A17F-48F7-A152-09D2A5C59254"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*",
|
|
"matchCriteriaId": "74819924-EB63-4BBF-9986-FEF6100EEE15"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*",
|
|
"matchCriteriaId": "100922EF-C773-4798-B352-B16FCAD48F36"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1C7E8CE3-8A75-4357-8722-17E2CE2378CC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:autodesk:design_review:2018:hotfix6:*:*:*:*:*:*",
|
|
"matchCriteriaId": "41A96F19-544E-471F-B6BF-9CC8E9403A2A"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0021",
|
|
"source": "psirt@autodesk.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |