Lucene search

AutodeskCVE-2022-27531

HistoryJun 16, 2022 - 4:15 p.m.

CVE-2022-27531

2022-06-1616:15:09

CWE-125

autodesk

web.nvd.nist.gov

cve-2022-27531

tif file

code execution

autodesk 3ds max 2022

vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected configurations

Nvd

Node

autodesk3ds_maxRange2021–2021.3.8

autodesk3ds_maxRange2022–2022.3.3

VendorProductVersionCPE
autodesk3ds_max*cpe:2.3:a:autodesk:3ds_max:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
autodesk	3ds_max	*	cpe:2.3:a:autodesk:3ds_max::::::::

CNA Affected

[
  {
    "product": "Autodesk 3ds Max",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2020, 2021"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0010

Social References

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

Related for CVE-2022-27531