NetSight
high7.8

CVE-2022-33887

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception.

Impact

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Affected products

VendorProductAffected versions
AutodeskAutocad
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Advance Steel
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Architecture
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Civil 3d
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Electrical
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Lt
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Map 3d
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Mechanical
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Mep
from 2022 before 2022.1.3
from 2023 before 2023.1.1
AutodeskAutocad Plant 3d
from 2022 before 2022.1.3
from 2023 before 2023.1.1

Weakness classification

References