CVE:CVE-2022-33890
CNNVD:CNNVD-202210-067
Autodesk AutoCAD和Autodesk Design Review（ADR）都是美国Autodesk公司的产品。Autodesk AutoCAD是一套专业的3D绘图软件。Autodesk Design Review是一套AutoCAD（绘图软件）辅助软件。该软件支持查看、标记、测量、打印和跟踪2D和3D设计文件的更改。
Autodesk Design Review和AutoCAD存在缓冲区错误漏洞，该漏洞源于恶意制作的PCT或DWF文件在通过DesignReview.exe应用程序使用时可能导致内存损坏漏洞，此漏洞与其他漏洞一起可能导致在当前进程的上下文中执行代码。以下产品和版本受到影响：Autodesk Design Review 2018 Hotfix 7 之前版本、Autodesk AutoCAD 2023.1.1之前版本、2022.1.3之前版本、2021.1.3之前版本、2020.1.6之前版本。
solution:Upgrade autodesk autocad to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_advance_steel to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_architecture to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_civil_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_electrical to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_lt to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_mep to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk design_review to a higher version than 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,2018:hotfix5,2018:hotfix6,and avoid the version 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,2018:hotfix5,2018:hotfix6