Vulnerabilities > CVE-2021-27034 - Out-of-bounds Write vulnerability in Autodesk Design Review
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |
Common Weakness Enumeration (CWE)
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003
- https://www.zerodayinitiative.com/advisories/ZDI-21-1132/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1131/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1130/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1125/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1129/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1128/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1127/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1126/