CVE:CVE-2022-27529
CNNVD:CNNVD-202204-3662
Autodesk AutoCAD是美国Autodesk公司的一套专业的3D绘图软件。
Autodesk AutoCAD 2022、2021、2020、2019 存在安全漏洞，该漏洞源于恶意制作的 PICT、BMP、PSD 或 TIF 文件可用于在解析 PICT、BMP、PSD 或 TIF 文件时写入超出分配的缓冲区。
solution:Upgrade autodesk advance_steel to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_architecture to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_electrical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_lt to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,2022.2.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2),[2022,2022.2.2); Upgrade autodesk autocad_map_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mechanical to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_mep to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk autocad_plant_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2); Upgrade autodesk civil_3d to a higher version than 2019.1.4,2020.1.5,2021.1.2,2022.1.2,and avoid the version [2019,2019.1.4),[2020,2020.1.5),[2021,2021.1.2),[2022,2022.1.2)