github - ghsa-j38r-8r52-4fm2

ghsa-j38r-8r52-4fm2

Vulnerability from github

Published

2022-05-14 01:10

Modified

2022-05-14 01:10

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2019-7361"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-04-09T20:30:00Z",
    "severity": "HIGH"
  },
  "details": "An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P\u0026ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018.",
  "id": "GHSA-j38r-8r52-4fm2",
  "modified": "2022-05-14T01:10:59Z",
  "published": "2022-05-14T01:10:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-7361"
    },
    {
      "type": "WEB",
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2019-7361

Vulnerability from cvelistv5

Published

2019-04-09 19:22

Modified

2024-08-04 20:46

Severity ?

Summary

References

▼	URL	Tags
	https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

Autodesk

Autodesk Civil 3D

Version: 2018

Autodesk	Autodesk Advance Steel	Version: 2018
Autodesk	Autodesk AutoCAD	Version: 2018
Autodesk	Autodesk AutoCAD Architecture	Version: 2018
Autodesk	Autodesk AutoCAD Electrical	Version: 2018
Autodesk	Autodesk AutoCAD Map 3D	Version: 2018
Autodesk	Autodesk AutoCAD Mechanical	Version: 2018
Autodesk	Autodesk AutoCAD MEP	Version: 2018
Autodesk	Autodesk AutoCAD P&ID	Version: 2018
Autodesk	Autodesk AutoCAD Plant 3D	Version: 2018
Autodesk	Autodesk AutoCAD LT	Version: 2018

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:46:46.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Autodesk Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD Map 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD P\u0026ID",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        },
        {
          "product": "Autodesk AutoCAD LT",
          "vendor": "Autodesk",
          "versions": [
            {
              "status": "affected",
              "version": "2018"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P\u0026ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Deserialization of Untrusted Data",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-04-09T19:22:15",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@autodesk.com",
          "ID": "CVE-2019-7361",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Autodesk Civil 3D",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk Advance Steel",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD Architecture",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD Electrical",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD Map 3D",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD Mechanical",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD MEP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD P\u0026ID",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD Plant 3D",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Autodesk AutoCAD LT",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2018"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Autodesk"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P\u0026ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Deserialization of Untrusted Data"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001",
              "refsource": "MISC",
              "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2019-7361",
    "datePublished": "2019-04-09T19:22:15",
    "dateReserved": "2019-02-04T00:00:00",
    "dateUpdated": "2024-08-04T20:46:46.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted