Vulnerability-Lookup

GSD-2022-27530

Vulnerability from gsd - Updated: 2023-12-13 01:19
Details
A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.
Aliases
CVE-2022-27530
Aliases
CVE-2022-27530
JSON
To clipboard
{
  "GSD": {
    "alias": "CVE-2022-27530",
    "description": "A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.",
    "id": "GSD-2022-27530"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-27530"
      ],
      "details": "A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.",
      "id": "GSD-2022-27530",
      "modified": "2023-12-13T01:19:41.303905Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "psirt@autodesk.com",
        "ID": "CVE-2022-27530",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "2022, 2021, 2020, 2019"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Buffer Overflow Write"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004",
            "refsource": "MISC",
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.2.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.2.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2019.1.4",
                "versionStartIncluding": "2019",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2020.1.5",
                "versionStartIncluding": "2020",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2021.1.2",
                "versionStartIncluding": "2021",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2022.1.2",
                "versionStartIncluding": "2022",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@autodesk.com",
          "ID": "CVE-2022-27530"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-04-25T16:27Z",
      "publishedDate": "2022-04-18T17:15Z"
    }
  }
}
CVE-2022-27530 (GCVE-0-2022-27530)

Vulnerability from cvelistv5 – Published: 2022-04-18 16:20 – Updated: 2024-08-03 05:32
Summary
Severity ?
No CVSS data available.
CWE
Buffer Overflow Write
Assigner
autodesk
References
URL
	Vendor	Product	Version
	n/a	Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D	Affected: 2022, 2021, 2020, 2019
Sightings

Author	Source	Type	Date
Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Detection rules are retrieved from Rulezet.
Action not permitted

GSD-2022-27530

CVE-2022-27530 (GCVE-0-2022-27530)

Tags

Sightings

Nomenclature
