CVE-2019-7361

Description

An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.361

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in AutoCAD MEP 2018	Windows
Multiple Vulnerabilities are affected in AutoCAD Plant 3D 2018	Windows
Multiple Vulnerabilities are affected in AutoCAD Architecture 2018	Windows
Multiple Vulnerabilities are affected in AutoCAD Electrical 2018	Windows
Multiple Vulnerabilities are affected in AutoCAD MAP 3D 2018	Windows
Multiple Vulnerabilities are affected in AutoCAD Mechanical 2018	Windows
Multiple Vulnerabilities are affected in Autodesk Advance Steel 2018	Windows
Multiple Vulnerabilities are affected in Autodesk Civil 3D 2018	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234