CVE:CVE-2023-27912
CNNVD:CNNVD-202304-1199
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD 2023版本存在安全漏洞，该漏洞源于恶意制作的 X_B 文件在解析时会强制执行越界读取。攻击者可利用该漏洞造成系统崩溃，读取敏感数据，或执行任意代码。
solution:Upgrade autodesk autocad to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_advance_steel to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_architecture to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_civil_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_electrical to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_lt to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_map_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_mechanical to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_mep to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3); Upgrade autodesk autocad_plant_3d to a higher version than 2023.1.3,and avoid the version [2023,2023.1.3)