PT-2015-3024 · Autodesk · Autodesk Design Review
Kdot
·
Publicado
2015-12-08
·
Atualizado
2015-12-16
·
CVE-2015-8572
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Autodesk Design Review versions prior to 2013 Hotfix 2
Description
The issue is caused by multiple buffer overflows in Autodesk Design Review, allowing remote attackers to execute arbitrary code. This can be achieved via crafted RLE data in BMP or FLI files, encoded scan lines in a PCX file, or DataSubBlock or GlobalColorTable in a GIF file.
Recommendations
For versions prior to 2013 Hotfix 2, update to Autodesk Design Review 2013 Hotfix 2 to resolve the issue.
As a temporary workaround, consider avoiding the use of
RLE data in BMP and FLI files, encoded scan lines in PCX files, and DataSubBlock and GlobalColorTable parameters in GIF files until a patch is applied.
Restrict access to files that may contain malicious data to minimize the risk of exploitation.Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Autodesk Design Review