CVE:CVE-2021-40161
CNNVD:CNNVD-202112-741
Autodesk Navisworks是美国Autodesk公司的用于建筑、工程和施工的 3D 模型审查软件。
Autodesk Navisworks PDFTron 组件中存在缓冲区错误漏洞，该漏洞源于 PDFTron 组件以不安全的方式加载 DLL 库。远程攻击者可以将特制的 .dll 文件放在远程 SMB 文件共享上，诱使受害者从远程位置打开 PDF 文件并在受害者的系统上执行任意代码。
solution:Upgrade autodesk revit to a higher version than 2020.2.5,2021.1.6,2022.1.2,and avoid the version (,2020.2.5),[2021,2021.1.6),[2022,2022.1.2); Upgrade autodesk navisworks to a higher version than 2019.6,2020.4,2021.3,2022.2,and avoid the version (,2019.6),[2020,2020.4),[2021,2021.3),[2022,2022.2); Upgrade autodesk advance_steel to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2,2020,2021,2022,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),(2022,2022.2),2020,2021,2022; Upgrade autodesk autocad_architecture to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_map_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2,2020,2021,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),[2022,2022.2),2020,2021; Upgrade autodesk civil_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version (,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk design_review to a higher version than 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4,and avoid the version 2018,2018:hotfix,2018:hotfix2,2018:hotfix3,2018:hotfix4