Skip to main content

Design Review CVE-2019-7362

HIGH
Uncontrolled Search Path Element (CWE-427)
2019-08-23 psirt@autodesk.com
RCE Design Review
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 23, 2019 - 20:15 nvd
HIGH 7.8

DescriptionNVD

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution.

AnalysisAI

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-427. DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution. Affected products include: Autodesk Design Review.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Design Review

View all
CVE-2021-27033 HIGH
8.1 Jul 09

A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability
CVE-2022-27864 HIGH
8.8 Jul 29

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PD
CVE-2015-8572 MEDIUM
6.8 Dec 15

Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitra
CVE-2022-42944 HIGH
7.8 Oct 21

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42943 HIGH
7.8 Oct 21

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42942 HIGH
7.8 Oct 21

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42941 HIGH
7.8 Oct 21

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

CVE-2022-42940 HIGH
7.8 Oct 21

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab
CVE-2022-42939 HIGH
7.8 Oct 21

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab
CVE-2022-42938 HIGH
7.8 Oct 21

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerab
CVE-2022-42937 HIGH
7.8 Oct 21

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption
CVE-2022-42936 HIGH
7.8 Oct 21

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption

Same weakness CWE-427 – Uncontrolled Search Path Element

View all
CVE-2017-6517 CRITICAL POC
9.8
CVE-2020-27955 CRITICAL POC
9.8
CVE-2024-48990 HIGH POC
7.8
CVE-2020-3433 HIGH POC
7.8
CVE-2022-2334 HIGH POC
7.2
CVE-2024-23054 CRITICAL POC
9.8
CVE-2023-31543 CRITICAL POC
9.8
CVE-2019-7653 CRITICAL POC
9.8

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2019-7362 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy