CVE-2005-4710: Medium severity Autodesk Revit vulnerability

Published Dec 31, 2005

Updated

Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "gain inappropriate access to another local user's computer," aka ID DL5549329.

Affected Software

32 affected components

Autodesk Revit=8

Autodesk Building Systems=2006

Autodesk AutoCAD Electrical=2005

Autodesk AutoCAD LT=2005

Autodesk AutoCAD=2005

Autodesk Survey=2005

Autodesk AutoCAD=2006

Autodesk 3ds Max=7

Autodesk Civil Design=2005

Autodesk Inventor=10

Autodesk Revit=7

Autodesk AutoCAD Electrical=2006

Autodesk Revit Structure=6

Autodesk Revit Structure=8.1

Autodesk Architectural Desktop=2006

Autodesk AutoCAD LT=2006

Autodesk Land Desktop=2006

Autodesk Raster Design=2006

Autodesk Survey=2006-sp1

Autodesk AutoCAD Mechanical=2005

Autodesk Map 3d=2005

Autodesk Autocad Civil 3d=2005

Autodesk Map 3d=2006

Autodesk Land Desktop=2005-sp1

Autodesk Viz=2006

Autodesk AutoCAD Mechanical=2006

Autodesk Inventor=9

Autodesk Raster Design=2005

Autodesk Autocad Civil 3d=2006

Autodesk Architectural Desktop=2005

Autodesk Utility Design=2005

Autodesk Building Systems=2005

Remediation

Patch Available

http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232

Event History

Dec 31, 2005

CVE Published

05:00 AM

Feb 10, 2006

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4710?

CVE-2005-4710 is classified as a vulnerability that allows unauthorized access to local user computers.

Which products are affected by CVE-2005-4710?

CVE-2005-4710 affects multiple Autodesk products, including AutoCAD, Revit, and Civil 3D, from 2005 and earlier versions.

How do I fix CVE-2005-4710?

To fix CVE-2005-4710, users should update to the latest supported versions of affected Autodesk products.

Can CVE-2005-4710 be exploited remotely?

Yes, CVE-2005-4710 can be exploited by remote attackers to gain inappropriate access to target systems.

Is there any workaround for CVE-2005-4710?

The best workaround for CVE-2005-4710 is to limit network access and implement strict user permissions until an update is applied.