PT-2021-4015 · Autodesk · Autodesk Autocad

Published 2021-06-17 · Updated 2022-05-13 · CVE-2021-27042

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD (affected versions not specified)

Description The issue arises from the application's failure to properly handle crafted DWG files, leading to an unhandled exception when parsing these files. This can be exploited by an attacker to execute arbitrary code using a maliciously crafted DWG file. The vulnerability is related to the incorrect handling of exceptional states during the syntactic analysis of DWG files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BDU:2021-04541

CVE-2021-27042

ZDI-22-446

Affected Products

Autodesk Autocad

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-27042 · Security Note
• https://bdu.fstec.ru/vul/2021-04541 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27042 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0007 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-446 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2021-0004 · Note
• https://fortiguard.com/zeroday/FG-VD-20-136 · Note