CVE:CVE-2008-4471
CNNVD:CNNVD-200810-079
DWF Viewer ActiveX控件(AdView.dll 9.0.0.96)的CExpressViewerControl class中存在目录遍历漏洞, 当在Revit Architecture 2009 SP2 和 Autodesk Design Review 2009中运行时,远程攻击者可以通过对SaveAS方法的自变量中的"..\"序列来复写任意文件
solution:Upgrade autodesk design_review to a higher version than 2009,and avoid the version 2009; Upgrade autodesk dwf_viewer to a higher version than *; Upgrade autodesk revit_architecture to a higher version than 2009:sp2,and avoid the version 2009:sp2