CVE:CVE-2022-25788
CNNVD:CNNVD-202203-596
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD 中存在输入验证错误漏洞，该漏洞源于产品在JT文件进行解析中未对文件安全性进行完全检查。攻击者可通过该漏洞导致内存损坏触发超过所分配缓冲区末尾的写操作导致在当前进程上下文执行代码。
solution:Upgrade autodesk advance_steel to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2022.1.2,2022.2.2,and avoid the version [2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_architecture to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2022.1.2,2022.2.2,and avoid the version [2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_map_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk civil_3d to a higher version than 2022.1.2,and avoid the version [2022,2022.1.2); Upgrade autodesk inventor to a higher version than 2022.2,and avoid the version [2022,2022.2)