CVE-2021-40167: High severity autodesk design review 2011 vulnerability
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-40167.
What software is affected by this vulnerability?
The Autodesk Design Review software version 2018 is affected by this vulnerability.
What is the severity of CVE-2021-40167?
CVE-2021-40167 has a severity rating of 7.8 (high).
How can this vulnerability be exploited?
A maliciously crafted dwf or .pct file, when consumed through the DesignReview.exe application, could lead to memory corruption and code execution in the current process.
Is there a fix available for CVE-2021-40167?
To mitigate this vulnerability, it is recommended to update the Autodesk Design Review software to a version that is not affected.