Vulnerabilities for Navisworks (...) - CXSECURITY.COM

Vulnerabilities for 'Navisworks'

2022-06-21

CVE-2022-27871

CWE-770

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

CVE-2022-27872

CWE-755

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.

2022-04-11

CVE-2022-25790

CWE-787

A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.

CVE-2022-25791

CWE-787

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.

CVE-2022-25792

CWE-787

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.

CVE-2022-25796

CWE-415

A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CVE-2022-27528

CWE-416

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

>>> Vendor: Autodesk 50 Products

Architectural desktop

Autocad civil 3d

Autocad electrical

Autocad mechanical

Building systems

Revit structure

Revit architecture

Autodesk softimage

Autodesk softimage xsi

Alias wavefront maya

Design review 2011

Autocad architecture

Autocad plant 3d

Autocad structural detailing

Autocad utility design

Sketchbook for enterprise 2014

Sketchbook express

Design review 2013

Autodesk backburner

Fbx software development kit

Autodesk desktop

Copyright 2024, cxsecurity.com