Design Review CVE-2014-9268

MEDIUM

Improper Input Validation (CWE-20)

2014-12-08 cve@mitre.org

RCE Design Review

6.8

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

M

Confidentiality

P

Integrity

P

Availability

P

Lifecycle Timeline

1

CVE Published

Dec 08, 2014 - 16:59 cve.org

MEDIUM 6.8

DescriptionCVE.org

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file.

AnalysisAI

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-20. The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file. Affected products include: Autodesk Design Review. Version information: before 2013.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Design Review

View all

CVE-2021-27033 HIGH This Week

A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability

CVE-2022-27864 HIGH This Week

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PD

CVE-2015-8572 MEDIUM This Month

Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitra

CVE-2022-42944 HIGH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42943 HIGH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42942 HIGH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42941 HIGH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42940 HIGH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab

CVE-2022-42939 HIGH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab

CVE-2022-42938 HIGH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab

CVE-2022-42937 HIGH This Week

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42936 HIGH This Week

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2025-53770 CRITICAL POC

CVE-2020-7961 CRITICAL POC

Share

CVE-2014-9268 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy