CVE-2022-33887: Buffer Overflow

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2022-33887.

Q: What is the severity of CVE-2022-33887?

CVE-2022-33887 has a severity keyword of high and a severity value of 7.8.

Q: Which software versions are affected by CVE-2022-33887?

Autodesk AutoCAD versions between 2022.1.3 and 2023.1.1, including Advance Steel, Architecture, Civil 3D, Electrical, LT, Map 3D, Mechanical, MEP, and Plant 3D, are affected by CVE-2022-33887.

Q: How can an attacker exploit CVE-2022-33887?

An attacker can exploit CVE-2022-33887 by using a maliciously crafted PDF file to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Q: Is there a fix for CVE-2022-33887?

To mitigate CVE-2022-33887, users should apply the necessary security updates provided by Autodesk.

Published Oct 3, 2022

Updated

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Affected Software

20 affected components

Autodesk AutoCAD>=2022<2022.1.3

Autodesk AutoCAD>=2023<2023.1.1

Autodesk Autocad Advance Steel>=2022<2022.1.3

Autodesk Autocad Advance Steel>=2023<2023.1.1

Autodesk AutoCAD Architecture>=2022<2022.1.3

Autodesk AutoCAD Architecture>=2023<2023.1.1

Autodesk Autocad Civil 3d>=2022<2022.1.3

Autodesk Autocad Civil 3d>=2023<2023.1.1

Autodesk AutoCAD Electrical>=2022<2022.1.3

Autodesk AutoCAD Electrical>=2023<2023.1.1

Autodesk AutoCAD LT>=2022<2022.1.3

Autodesk AutoCAD LT>=2023<2023.1.1

Autodesk AutoCAD Map 3D>=2022<2022.1.3

Autodesk AutoCAD Map 3D>=2023<2023.1.1

Autodesk AutoCAD Mechanical>=2022<2022.1.3

Autodesk AutoCAD Mechanical>=2023<2023.1.1

Autodesk AutoCAD MEP>=2022<2022.1.3

Autodesk AutoCAD MEP>=2023<2023.1.1

Autodesk AutoCAD Plant 3D>=2022<2022.1.3

Autodesk AutoCAD Plant 3D>=2023<2023.1.1

Event History

Oct 3, 2022

CVE Published

via MITRE·02:24 PM

Data Sourced

via MITRE·02:24 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-33887.

What is the severity of CVE-2022-33887?

CVE-2022-33887 has a severity keyword of high and a severity value of 7.8.

Which software versions are affected by CVE-2022-33887?

Autodesk AutoCAD versions between 2022.1.3 and 2023.1.1, including Advance Steel, Architecture, Civil 3D, Electrical, LT, Map 3D, Mechanical, MEP, and Plant 3D, are affected by CVE-2022-33887.

How can an attacker exploit CVE-2022-33887?

An attacker can exploit CVE-2022-33887 by using a maliciously crafted PDF file to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Is there a fix for CVE-2022-33887?