CVE-2023-27913

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:53

Type Values Removed Values Added
References () https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory () https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory

20 Apr 2023, 16:06

Type Values Removed Values Added
References (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-190
First Time Autodesk autocad Map 3d
Autodesk autocad Architecture
Autodesk autocad Lt
Autodesk autocad Electrical
Autodesk autocad Plant 3d
Autodesk autocad Mep
Autodesk autocad
Autodesk autocad Civil 3d
Autodesk autocad Advance Steel
Autodesk autocad Mechanical
Autodesk
CPE cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*

14 Apr 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-14 19:15

Updated : 2025-02-06 22:15


NVD link : CVE-2023-27913

Mitre link : CVE-2023-27913

CVE.ORG link : CVE-2023-27913


JSON object : View

Products Affected

autodesk

  • autocad_advance_steel
  • autocad_civil_3d
  • autocad_map_3d
  • autocad_mep
  • autocad_architecture
  • autocad_mechanical
  • autocad_electrical
  • autocad
  • autocad_lt
  • autocad_plant_3d
CWE
CWE-190

Integer Overflow or Wraparound