Not rated
CVE-2019-7359 An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk…
Description
An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Autodesk Advance Steel | 2018 | No fix stated |
| Autodesk AutoCAD | 2018 | No fix stated |
| Autodesk AutoCAD Architecture | 2018 | No fix stated |
| Autodesk AutoCAD Electrical | 2018 | No fix stated |
| Autodesk AutoCAD Map 3D | 2018 | No fix stated |
| Autodesk AutoCAD Mechanical | 2018 | No fix stated |
| Autodesk AutoCAD MEP | 2018 | No fix stated |
| Autodesk AutoCAD P&ID | 2018 | No fix stated |
| Autodesk AutoCAD Plant 3D | 2018 | No fix stated |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Autodesk AutoCAD LT | 2018 | No fix stated |
| Autodesk Civil 3D | 2018 | No fix stated |
References
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of Autodesk Advance Steel
The 4 CVEs of Autodesk Advance Steel →
CVE-2019-7358
An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk…
Not rated
CVE-2019-7361
An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may…
Not rated
CVE-2019-7360
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk…
Not rated