CVE:CVE-2022-33886
CNNVD:CNNVD-202210-072
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD存在安全漏洞，该漏洞源于解析恶意制作的MODEL和SLDPRT文件可用于写入超出分配的缓冲区，攻击者可以利用此漏洞执行任意代码。以下产品和版本受到影响：Autodesk AutoCAD 2023.1.1之前版本、2022.1.3之前版本、2021.1.3之前版本、2020.1.6之前版本。
solution:Upgrade autodesk autocad to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_advance_steel to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_architecture to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_civil_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_electrical to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_lt to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_mep to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.3,2023.1.1,and avoid the version [2022,2022.1.3),[2023,2023.1.1)