CVE:CVE-2022-33888
CNNVD:CNNVD-202210-069
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD 存在缓冲区错误漏洞，该漏洞源于应用程序处理恶意制作的Dwg2Spd文件时，可能会因写访问冲突而导致内存损坏漏洞。此漏洞与其他漏洞一起可能导致在当前进程的上下文中执行代码。
solution:Upgrade autodesk autocad to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_advance_steel to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_architecture to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_civil_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_electrical to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_lt to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_mep to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1)