PT-2022-18650 · Autodesk · Autodesk Design Review

Published 2022-07-29 · Updated 2022-08-08 · CVE-2022-27864

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk DesignReview (affected versions not specified)

Description A Double Free issue allows remote attackers to execute arbitrary code through the DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this issue, where the target must visit a malicious page or open a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2022-27864

Affected Products

Autodesk Design Review

References · 4

• https://osv.dev/vulnerability/CVE-2022-27864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27864 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0009 · Vendor Advisory
• https://t.me/cibsecurity/47295 · Telegram Post