CVE:CVE-2022-25789
CNNVD:CNNVD-202203-638
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD存在资源管理错误漏洞，该漏洞允许远程攻击者可利用该漏洞在受影响的Autodesk AutoCAD安装上执行任意代码。利用该漏洞需要用户交互，因为目标必须访问恶意页面或打开恶意文件。具体缺陷存在于对DWFX文件的解析中。这个问题是由于在对对象执行操作之前没有验证对象的存在性。攻击者可利用该漏洞可以利用这个漏洞在当前进程的上下文中执行代码。
solution:Upgrade autodesk advance_steel to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_architecture to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_map_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk civil_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2)