Autodesk DWG TrueView Buffer Overflow

medium Nessus Plugin ID 76308

Language:

Synopsis

An application on the remote host is affected by a buffer overflow vulnerability.

Description

The remote host has an install of Autodesk DWG TrueView version 2011, 2012, 2013 or 2014, and thus is affected by an error related to the handling of DWG files.

The error exists due to a failure to properly bounds-check data in DWG files before using it to index and copy heap memory values. An attacker could exploit this issue by convincing a user to open a specially crafted DWG file which could result in arbitrary code execution.

Solution

Upgrade to version 18.1.75.0.0, 18.2.75.0.0, 19.0.75.0.0, 19.1.75.0.0 or later.

Plugin Details

Severity: Medium

ID: 76308

File Name: autodesk_dwg_trueview_overflow.nasl

Version: 1.3

Type: local

Agent: windows

Family: Windows

Published: 6/30/2014

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:autodesk:dwg_trueview

Required KB Items: SMB/Autodesk DWG TrueView/Installed

Exploit Ease: No known exploits are available

Patch Publication Date: 7/10/2013

Vulnerability Publication Date: 6/24/2013

Reference Information

CVE: CVE-2013-3665

BID: 61355

Detections

Analytics