A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.
References
Link | Resource |
---|---|
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
Configuration 12 (hide)
|
Configuration 13 (hide)
|
Configuration 14 (hide)
|
Configuration 15 (hide)
|
History
No history.
Information
Published : 2021-12-23 19:15
Updated : 2023-08-08 14:21
NVD link : CVE-2021-40161
Mitre link : CVE-2021-40161
CVE.ORG link : CVE-2021-40161
JSON object : View
Products Affected
autodesk
- navisworks
- autocad
- autocad_mep
- autocad_plant_3d
- autocad_mechanical
- advance_steel
- revit
- autocad_map_3d
- design_review
- autocad_architecture
- civil_3d
- autocad_electrical
- autocad_lt
CWE
CWE-787
Out-of-bounds Write