CVE-2021-27037

Description

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.483

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Autodesk Design Review 2011	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2012	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2013	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2017	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2018	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234