{"containers": {"cna": {"affected": [{"product": "Autodesk Design Review", "vendor": "n/a", "versions": [{"status": "affected", "version": "2018,\u00a02017,\u00a02013, 2012, 2011"}]}], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code."}], "problemTypes": [{"descriptions": [{"description": "Heap Overflow Vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-11-09T13:25:05", "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1127/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1132/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1125/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1126/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1128/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1129/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1130/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1131/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@autodesk.com", "ID": "CVE-2021-27034", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Autodesk Design Review", "version": {"version_data": [{"version_value": "2018,\u00a02017,\u00a02013, 2012, 2011"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Heap Overflow Vulnerability"}]}]}, "references": {"reference_data": [{"name": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003", "refsource": "MISC", "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1127/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1127/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1132/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1132/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1125/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1125/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1126/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1126/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1128/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1128/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1129/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1129/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1130/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1130/"}, {"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-1131/", "refsource": "MISC", "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1131/"}]}}}}, "cveMetadata": {"assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "assignerShortName": "autodesk", "cveId": "CVE-2021-27034", "datePublished": "2021-07-09T14:16:05", "dateReserved": "2021-02-09T00:00:00", "dateUpdated": "2021-11-09T13:25:05", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*", "matchCriteriaId": "83CF6CDF-806C-4DC5-B572-C1C2BC2C25F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "matchCriteriaId": "2A78B6F8-DF84-4E6C-A247-0F6D2F8CA679", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "matchCriteriaId": "DCD2CA9B-16E1-4BE7-A4E1-A9817A503958", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "matchCriteriaId": "31F2529F-ECF0-4568-BBDC-82B396A52332", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "matchCriteriaId": "7D07C55F-1D23-4E2B-AC1E-67D735F800B7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code."}, {"lang": "es", "value": "Podr\u00eda producirse un desbordamiento del b\u00fafer basado en la pila mientras se analizan archivos PICT, PCX, RCL o TIFF en Autodesk Design Review 2018, 2017, 2013, 2012, 2011. Esta vulnerabilidad puede ser explotada para ejecutar c\u00f3digo arbitrario."}], "id": "CVE-2021-27034", "lastModified": "2021-12-08T20:23:47.513", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-07-09T15:15:07.720", "references": [{"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1125/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1126/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1127/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1128/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1129/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1130/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1131/"}, {"source": "psirt@autodesk.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-1132/"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}