CVE:CVE-2008-4472
CNNVD:CNNVD-200810-080
LiveUpdate ActiveX 控件(LiveUpdate16.DLL 17.2.56)的UpdateEngine class, 当在Revit Architecture 2009 SP2 和 Autodesk Design Review 2009中使用时,远程攻击者可以通过对ApplyPatch方法的第二自变量来执行任意程序。
solution:Upgrade autodesk design_review to a higher version than 2009,and avoid the version 2009; Upgrade autodesk dwf_viewer to a higher version than *; Upgrade autodesk revit_architecture to a higher version than 2009:sp2,and avoid the version 2009:sp2