CVE:CVE-2022-25790
CNNVD:CNNVD-202203-627
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD DWF文件 存在缓冲区错误漏洞。允许远程攻击者利用该漏洞在受影响的Autodesk AutoCAD上执行任意代码。由于目标必须访问恶意页面或打开恶意文件，故此漏洞需要用户交互。具体缺陷存在于对DWF文件的解析中，DWF文件中的特制数据可以触发超过分配缓冲区末尾的写入。
solution:Upgrade autodesk advance_steel to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_architecture to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_map_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk civil_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk navisworks to a higher version than 2022.2,and avoid the version [2022,2022.2)