NetSight
high7.8

CVE-2021-40161

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.

Impact

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.

Affected products

VendorProductAffected versions
AutodeskRevit
before 2020.2.5
from 2021 before 2021.1.6
from 2022 before 2022.1.2
AutodeskNavisworks
before 2019.6
from 2020 before 2020.4
from 2021 before 2021.3
from 2022 before 2022.2
AutodeskAdvance Steel
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
after 2022 before 2022.2
Version 2020
AutodeskAutocad Architecture
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Electrical
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Map 3d
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mep
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Lt
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
from 2022 before 2022.2
Version 2020
AutodeskCivil 3d
before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2

Weakness classification

References