CVE:CVE-2019-7359
CNNVD:CNNVD-201904-487
Autodesk Advance Steel等都是美国Autodesk公司的产品。Autodesk Advance Steel是一套钢筋结构分析3D建模软件。Autodesk AutoCAD是一套专业的3D绘图软件。Autodesk Civil 3D是一套面向土木工程设计与文档编制的建筑信息模型（BIM）解决方案。
多款Autodesk产品中的AcCellMargin处理代码存在缓冲区错误漏洞，该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品和版本受到影响：Autodesk Advance Steel 2018版本；Autodesk AutoCAD 2018版本；Autodesk AutoCAD Architecture 2018版本；Autodesk AutoCAD Electrical 2018版本；Autodesk AutoCAD Map 2018版本；Autodesk AutoCAD Mechanical 2018版本；Autodesk AutoCAD MEP 2018版本；Autodesk AutoCAD P＆ID 2018版本；Autodesk AutoCAD Plant 3D 2018版本；Autodesk AutoCAD LT 2018版本；Autodesk Civil 3D 2018版本。
solution:Upgrade autodesk advance_steel to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_architecture to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_electrical to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_lt to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_map_3d to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_mechanical to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_mep to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_p&id to a higher version than 2018,and avoid the version 2018; Upgrade autodesk autocad_plant_3d to a higher version than 2018,and avoid the version 2018; Upgrade autodesk civil_3d to a higher version than 2018,and avoid the version 2018