CVE:CVE-2022-33889
CNNVD:CNNVD-202210-073
Autodesk Design Review（ADR）是美国Autodesk公司的一套AutoCAD（绘图软件）辅助软件。该软件支持查看、标记、测量、打印和跟踪2D和3D设计文件的更改。
Autodesk Design Review和AutoCAD存在缓冲区错误漏洞，该漏洞源于解析恶意制作的GIF或JPEG文件时，可被用于写入超出分配的堆缓冲区。此漏洞可能导致任意代码执行。以下产品和版本受到影响：Autodesk Design Review 2018 Hotfix 7 之前版本、Autodesk AutoCAD 2023.1.1之前版本、2022.1.3之前版本、2021.1.3之前版本、2020.1.6之前版本。
solution:Upgrade autodesk autocad to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_advance_steel to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_architecture to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_civil_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_electrical to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_lt to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_mep to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version (,2022.1.3),[2023.0.0,2023.1.1); Upgrade autodesk design_review to a higher version than 2018,2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,2018:hotfix5,2018:hotfix6,and avoid the version (,2018),2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,2018:hotfix5,2018:hotfix6