PT-2015-3024 · Autodesk · Autodesk Design Review
Kdot
·
Published
2015-12-08
·
Updated
2015-12-16
·
CVE-2015-8572
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Autodesk Design Review versions prior to 2013 Hotfix 2
Description
The issue is caused by multiple buffer overflows in Autodesk Design Review, allowing remote attackers to execute arbitrary code. This can be achieved via crafted RLE data in BMP or FLI files, encoded scan lines in a PCX file, or DataSubBlock or GlobalColorTable in a GIF file.
Recommendations
For versions prior to 2013 Hotfix 2, update to Autodesk Design Review 2013 Hotfix 2 to resolve the issue.
As a temporary workaround, consider avoiding the use of
RLE data in BMP and FLI files, encoded scan lines in PCX files, and DataSubBlock and GlobalColorTable parameters in GIF files until a patch is applied.
Restrict access to files that may contain malicious data to minimize the risk of exploitation.Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Autodesk Design Review