CVE:CVE-2022-42937
CNNVD:CNNVD-202210-1575
Autodesk Design Review（ADR）是美国Autodesk公司的一套AutoCAD（绘图软件）辅助软件。该软件支持查看、标记、测量、打印和跟踪2D和3D设计文件的更改。
Autodesk Design Review 2018版本存在安全漏洞，该漏洞源于当通过 DesignReview.exe 应用程序使用恶意制作的 .dwf 或 .pct 文件时，可能会因写访问冲突而导致内存损坏漏洞，攻击者利用该漏洞可以在当前进程的上下文中执行代码。
solution:Upgrade autodesk autocad to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_advance_steel to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_architecture to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_civil_3d to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_electrical to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_lt to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_map_3d to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_mechanical to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_mep to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk autocad_plant_3d to a higher version than 2019,2020,2021,2022,2023,and avoid the version 2019,2020,2021,2022,2023; Upgrade autodesk design_review to a higher version than 2018,and avoid the version 2018