PT-2022-18652 · Autodesk · Designreview.Exe

Published 2022-07-29 · Updated 2022-08-08 · CVE-2022-27866

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DesignReview.exe (affected versions not specified)

Description The issue arises when a maliciously crafted TIFF file is consumed through the DesignReview.exe application, causing it to read beyond allocated boundaries while parsing the TIFF file. This could potentially lead to code execution in the context of the current process, especially when combined with other vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-27866

Affected Products

Designreview.Exe

References · 4

• https://osv.dev/vulnerability/CVE-2022-27866 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27866 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0009 · Vendor Advisory
• https://t.me/cibsecurity/47299 · Telegram Post