CVE:CVE-2021-40160
CNNVD:CNNVD-202112-749
Autodesk Navisworks是美国欧特克（Autodesk）公司的用于建筑、工程和施工的 3D 模型审查软件。
Autodesk Navisworks 存在缓冲区错误漏洞，远程攻击者可以通过该漏洞发越界读取错误并读取系统内存中的内容。
solution:Upgrade autodesk revit to a higher version than 2020.2.5,2021.1.4,2022.1,and avoid the version [2020,2020.2.5),[2021,2021.1.4),[2022,2022.1); Upgrade autodesk navisworks to a higher version than 2019.6,2020.4,2021.3,2022.1,and avoid the version [2019,2019.6),[2020,2020.4),[2021,2021.3),[2022,2022.1); Upgrade autodesk advance_steel to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad to a higher version than 2022.1.1,2022.2,and avoid the version [2022,2022.1.1),[2022,2022.2); Upgrade autodesk autocad_architecture to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad_electrical to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad_lt to a higher version than 2022.1.1,2022.2,and avoid the version [2022,2022.1.1),[2022,2022.2); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad_mep to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk civil_3d to a higher version than 2022.1.1,and avoid the version [2022,2022.1.1); Upgrade autodesk design_review to a higher version than 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,and avoid the version 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4