CVE:CVE-2023-29067
CNNVD:CNNVD-202304-1193
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD 2023存在安全漏洞，该漏洞源于在解析恶意制作的X_B文件时会因写访问冲突导致内存损坏。攻击者利用该漏洞在当前进程中执行代码。
solution:Upgrade autodesk autocad to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_advance_steel to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_architecture to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_civil_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_electrical to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_lt to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_map_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_mechanical to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_mep to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_plant_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3)