CVE-2021-40167

Description

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.418

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Autodesk Design Review 2011	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2012	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2013	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2017	Windows
Multiple Vulnerabilities are affected in Autodesk Design Review 2018	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234