CVE-2022-27864 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2022-27864

Analyzed

More Info Official Page

Source-psirt@autodesk.com

Published At-29 Jul, 2022 | 20:15

Updated At-08 Aug, 2022 | 17:56

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

>>design_review>>2011

cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:*

>>design_review>>2012

cpe:2.3:a:autodesk:design_review:2012:-:*:*:*:*:*:*

>>design_review>>2013

cpe:2.3:a:autodesk:design_review:2013:-:*:*:*:*:*:*

>>design_review>>2017

cpe:2.3:a:autodesk:design_review:2017:-:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*

>>design_review>>2018

cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-415	Primary	nvd@nist.gov

CWE ID: CWE-415

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009	psirt@autodesk.com	Patch Vendor Advisory

Hyperlink: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009

Source: psirt@autodesk.com

Resource:

Patch

Vendor Advisory