This vulnerability allows remote malicious users to execute arbitrary code on affected installations of Autodesk Inventor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
autodesk inventor 2022 |
||
autodesk inventor 2021 |
||
autodesk inventor 2020 |
||
autodesk inventor 2019 |
||
autodesk autocad |
||
autodesk autocad architecture |
||
autodesk autocad electrical |
||
autodesk autocad map 3d |
||
autodesk autocad mechanical |
||
autodesk advance steel |
||
autodesk autocad lt |
||
autodesk autocad mep |
||
autodesk autocad plant 3d |
||
autodesk civil 3d |
Vulmon