CVE:CVE-2021-40162
CNNVD:CNNVD-202210-326
Autodesk Image Processing是美国Autodesk公司的一个图像处理软件。
Autodesk Image Processing 存在安全漏洞，该漏洞源于在解析 TIFF、PICT、TGA 或 RLC 文件时，Autodesk Image Processing 组件可能会被强制读取超出分配的边界，攻击者利用该漏洞可以执行任意代码。
solution:Upgrade autodesk autocad to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_advance_steel to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_architecture to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_civil_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2019.1.4,2020.1.5,2020.3.2,2021.1.2,2021.2.2,2022.1.2,2022.2.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2020,2020.3.2),[2021,2021.1.2),[2021,2021.2.2),[2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_map_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk design_review to a higher version than 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,and avoid the version 2018,2018:hotfix,2018:hotfix2,2018:hotfix3; Upgrade autodesk dwg_trueview to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.1,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.1); Upgrade autodesk fusion to a higher version than 2.0.11405,and avoid the version [2.0.10356,2.0.11405); Upgrade autodesk infrastructure_parts_editor to a higher version than 2019.2.2,2020.0.2,2021,2022,and avoid the version [2019,2019.2.2),[2020,2020.0.2),2021,2022; Upgrade autodesk infraworks to a higher version than 2019.3,2020.2,2021.2,2019.3,2019.3:hotfix_1,2019.3:hotfix_2,2019.3:hotfix_3,2020.2,2020.2:hotfix_1,2020.2:hotfix_2,2021.2,2021.2:hotfix_1,2021.2:hotfix_2,2022.0,2022.0:hotfix_1,2022.1,and avoid the version [2019,2019.3),[2020,2020.2),[2021,2021.2),2019.3,2019.3:hotfix_1,2019.3:hotfix_2,2019.3:hotfix_3,2020.2,2020.2:hotfix_1,2020.2:hotfix_2,2021.2,2021.2:hotfix_1,2021.2:hotfix_2,2022.0,2022.0:hotfix_1,2022.1; Upgrade autodesk inventor to a higher version than 2019.6,2020.5,2021.4,2022.2,and avoid the version [2019,2019.6),[2020,2020.5),[2021,2021.4),[2022,2022.2); Upgrade autodesk navisworks to a higher version than 2019.7,2020.5,2021.4,2022.2,and avoid the version [2019,2019.7),[2020,2020.5),[2021,2021.4),[2022,2022.2); Upgrade autodesk revit to a higher version than 2019.2.4,2020.2.6,2021.1.5,2022,and avoid the version [2019,2019.2.4),[2020,2020.2.6),[2021,2021.1.5),2022; Upgrade autodesk storm_and_sanitary_analysis to a higher version than 2020.3.1,2021.3.1,2019,2022,and avoid the version [2020,2020.3.1),[2021,2021.3.1),2019,2022