PT-2022-18657 · Autodesk · Autodesk Navisworks

Published 2022-06-21 · Updated 2022-06-29 · CVE-2022-27872

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk Navisworks version 2022

Description The issue arises from the application's failure to properly handle maliciously crafted PDF files, leading to an unhandled exception. This can be exploited by an attacker to cause a crash, read sensitive data, or execute arbitrary code. The vulnerability is related to the parsing of PDF files.

Recommendations For Autodesk Navisworks version 2022, update to a version that includes a fix for this issue to prevent potential crashes, data breaches, or code execution. As a temporary workaround, consider restricting the handling of PDF files within the application until a patch is available.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-27872

Affected Products

Autodesk Navisworks

References · 4

• https://osv.dev/vulnerability/CVE-2022-27872 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27872 · Security Note
• https://t.me/cvenotify/32366 · Telegram Post