CVE-2023-29067

EUVD-2023-32670
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
autodeskautocad
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_advance_steel
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_architecture
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_civil_3d
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_electrical
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_lt
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_map_3d
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_mechanical
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_mep
2023 ≤
𝑥
< 2023.1.3
autodeskautocad_plant_3d
2023 ≤
𝑥
< 2023.1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005