CVE-2024-23138 Stack-based Overflow Vulnerability in the TrueViewTM Desktop Software
A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Autodesk
product: AutoCAD
cpes: cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Architecture
cpes: cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Electrical
cpes: cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Mechanical
cpes: cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD MEP
cpes: cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Plant 3D
cpes: cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: Civil 3D
cpes: cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: Advance Steel
cpes: cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD MAP 3D
cpes: cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD LT
cpes: cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:aautocad_lt:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Mac
cpes: cpe:2.3:a:autodesk:autocad_mac:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mac:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mac:2022:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD LT for Mac
cpes: cpe:2.3:a:autodesk:autocad_lt_for_mac:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt_for_mac:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt_for_mac:2022:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: DWG TrueView
cpes: cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:dwg_trueview:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:dwg_trueview:2022:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-03-17T23:56:39.590Z