Autodesk Design Review vulnerabilities

46 CVEs affecting Autodesk Design Review, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-42944, published 2022-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4472, published 2008-10-07. High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days. The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to execute…
CVE-2021-40167, published 2022-01-25. High severity, CVSS 7.8. EPSS: 7.7% chance of exploitation in the next 30 days. A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2008-4471, published 2008-10-07. High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009,…
CVE-2014-9268, published 2014-12-08. Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days. The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file.
CVE-2015-8572, published 2015-12-15. Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days. Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a (1) BMP or (2) FLI file, (3) encoded scan…
CVE-2015-8571, published 2015-12-15. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value in a BMP file, which triggers a buffer overflow.
CVE-2021-27033, published 2021-07-09. High severity, CVSS 8.1. EPSS: 3% chance of exploitation in the next 30 days. A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this…
CVE-2021-27034, published 2021-07-09. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary…
CVE-2021-27038, published 2021-07-09. High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days. A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute…
CVE-2022-27525, published 2022-04-18. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction…

Latest

CVE-2022-42944, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-42943, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-42942, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-42941, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-42940, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead…
CVE-2022-42939, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead…
CVE-2022-42938, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead…
CVE-2022-42937, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction…
CVE-2022-42936, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction…
CVE-2022-42935, published 2022-10-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction…