KLA10081 ACE vulnerability in Autodesk

An unspecified vulnerability was found in Autodesk products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed DWG file.

Original advisories

Autodesk bulletin

Related products

AutoCAD

AutoDesk-DWG-TrueView

CVE list

CVE-2013-3665 high

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Autodesk AutoCAD versions from 2011 to 2014 (Any edition)Autodesk Dwg TrueView versions from 2011 to 2014