CVE-2021-27034

A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
autodeskCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
Common Weakness Enumeration
References
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003
https://www.zerodayinitiative.com/advisories/ZDI-21-1125/
https://www.zerodayinitiative.com/advisories/ZDI-21-1126/
https://www.zerodayinitiative.com/advisories/ZDI-21-1127/
https://www.zerodayinitiative.com/advisories/ZDI-21-1128/
https://www.zerodayinitiative.com/advisories/ZDI-21-1129/
https://www.zerodayinitiative.com/advisories/ZDI-21-1130/
https://www.zerodayinitiative.com/advisories/ZDI-21-1131/
https://www.zerodayinitiative.com/advisories/ZDI-21-1132/
https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003
https://www.zerodayinitiative.com/advisories/ZDI-21-1125/
https://www.zerodayinitiative.com/advisories/ZDI-21-1126/
https://www.zerodayinitiative.com/advisories/ZDI-21-1127/
https://www.zerodayinitiative.com/advisories/ZDI-21-1128/
https://www.zerodayinitiative.com/advisories/ZDI-21-1129/
https://www.zerodayinitiative.com/advisories/ZDI-21-1130/
https://www.zerodayinitiative.com/advisories/ZDI-21-1131/
https://www.zerodayinitiative.com/advisories/ZDI-21-1132/