CVE:CVE-2021-40158
CNNVD:CNNVD-202201-2198
Autodesk Inventor是美国Autodesk公司的一个电脑辅助设计应用程序。用来进行 3D 机械设计、模拟、显示、与储存。
Autodesk Inventor 中存在缓冲区错误漏洞，该漏洞源于产品在解析JT文件时存在异常。攻击者可通过特殊的JT文件导致越界读引发信息泄漏。以下产品及版本受到影响：Autodesk Inventor 2019, 2020, 2021, 2022。
solution:Upgrade autodesk advance_steel to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_architecture to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk civil_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk inventor to a higher version than 2022.2,2019,2020,2021,and avoid the version [2022,2022.2),2019,2020,2021