Title

Autodesk Design Review Multiple Remote Code Execution Vulnerabilities (Cat II impact)

Discussion

Autodesk has released an advisory addressing multiple buffer overflow vulnerabilities in Design Review. Autodesk is a software that allows users to open digital versions of their drawings. To exploit these vulnerabilities, a remote attacker would use a specially crafted Active X control. If successfully exploited, these vulnerabilities would allow an attacker to execute arbitrary code in the context of the application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-73149

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.