CVE-2022-27866: High severity autodesk design review 2011 vulnerability
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27866?
CVE-2022-27866 is a vulnerability in Autodesk Design Review where a maliciously crafted TIFF file can be forced to read beyond allocated boundaries, potentially leading to code execution.
How does CVE-2022-27866 affect Autodesk Design Review?
CVE-2022-27866 affects Autodesk Design Review versions 2011, 2012, 2013, 2017, 2018, and hotfix versions 2018-hotfix, 2018-hotfix2, 2018-hotfix3, and 2018-hotfix4. It allows a malicious TIFF file to exploit the vulnerability.
What is the severity of CVE-2022-27866?
CVE-2022-27866 has a severity rating of 7.8 (high).
How can I fix CVE-2022-27866?
To fix CVE-2022-27866, update Autodesk Design Review to the latest version or apply the available hotfixes provided by Autodesk.
Where can I find more information about CVE-2022-27866?
You can find more information about CVE-2022-27866 in the Autodesk Security Advisory ADSSA-2022-0009 at https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009.