CVE-2022-27865
First published: Fri Jul 29 2022(Updated: )
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Credit: psirt@autodesk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autodesk Design Review | =2011 | |
| Autodesk Design Review | =2012 | |
| Autodesk Design Review | =2013 | |
| Autodesk Design Review | =2017 | |
| Autodesk Design Review | =2018 | |
| Autodesk Design Review | =2018-hotfix | |
| Autodesk Design Review | =2018-hotfix2 | |
| Autodesk Design Review | =2018-hotfix3 | |
| Autodesk Design Review | =2018-hotfix4 | |
| Autodesk Design Review | =2018-hotfix5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-27865.
What software is affected by this vulnerability?
Autodesk Design Review versions 2011, 2012, 2013, 2017, 2018, 2018-hotfix, 2018-hotfix2, 2018-hotfix3, 2018-hotfix4, and 2018-hotfix5 are affected by this vulnerability.
How can this vulnerability be exploited?
This vulnerability can be exploited by using a maliciously crafted TGA or PCX file to write beyond the allocated buffer through the DesignReview.exe application while parsing TGA and PCX files.
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 7.8.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update Autodesk Design Review to a version that is not affected by this vulnerability.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- agent/source
- vendor/autodesk
- canonical/autodesk design review
- version/autodesk design review/2011
- version/autodesk design review/2012
- version/autodesk design review/2013
- version/autodesk design review/2017
- version/autodesk design review/2018
- version/autodesk design review/2018-hotfix
- version/autodesk design review/2018-hotfix2
- version/autodesk design review/2018-hotfix3
- version/autodesk design review/2018-hotfix4
- version/autodesk design review/2018-hotfix5