PT-2022-21888 · Autodesk · Autodesk Autocad

Published 2022-09-29 · Updated 2022-10-05 · CVE-2022-33887

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD version 2023

Description The issue arises when a maliciously crafted PDF file is parsed through the software, leading to an unhandled exception. This can be exploited by an attacker to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Recommendations For Autodesk AutoCAD version 2023, update to a version that includes a fix for the PDF file parsing issue to prevent potential crashes, data breaches, or code execution.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-33887

ZDI-22-1306

Affected Products

Autodesk Autocad

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-33887 · Security Note
• https://osv.dev/vulnerability/CVE-2022-33887 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0020 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-1306 · Security Note