CVE-2023-29067

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*

History

06 Feb 2025, 21:15

Type Values Removed Values Added
References (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory () https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory

20 Apr 2023, 15:32

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
First Time Autodesk autocad Electrical
Autodesk autocad Map 3d
Autodesk autocad Plant 3d
Autodesk autocad Advance Steel
Autodesk autocad Mechanical
Autodesk autocad Architecture
Autodesk autocad Mep
Autodesk autocad Civil 3d
Autodesk autocad
Autodesk autocad Lt
Autodesk
References (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory
CWE CWE-787
CPE cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*

14 Apr 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-14 19:15

Updated : 2025-02-06 21:15


NVD link : CVE-2023-29067

Mitre link : CVE-2023-29067


JSON object : View

Products Affected

autodesk

  • autocad_mechanical
  • autocad
  • autocad_electrical
  • autocad_plant_3d
  • autocad_mep
  • autocad_map_3d
  • autocad_advance_steel
  • autocad_civil_3d
  • autocad_architecture
  • autocad_lt
CWE
CWE-787

Out-of-bounds Write