CVE-2021-27042

高 7.8CVE-2021-27042 · 25/06/2021 公開 · 17/06/2026 更新

要点

CVE-2021-27042 は advance steel (autodesk), autocad (autodesk), autocad architecture (autodesk) に影響する深刻度「高」 (CVSS 7.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.8%（全脆弱性の 78.4% より高い）。
対処：2019.1.3, 2020.1.4, 2021.1.1, 2022.0.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
advance steel autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad architecture autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, ≤ 2022.0.1`	`2019.1.32020.1.42021.1.1`
autocad electrical autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad lt autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad map 3d autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad mechanical autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad mep autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
autocad plant 3d autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`
civil 3d autodesk	`≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4≥ 2021, < 2021.1.1≥ 2022, < 2022.0.1`	`2019.1.32020.1.42021.1.12022.0.1`

概要

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.