Buffer overflow in Autodesk Advance Steel
CVE-2019-7359
An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.016 (75.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 75.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000
Affected products
- Autodesk Advance Steel — versions 2018
- Autodesk Autocad — versions 2018
- Autodesk Autocad Architecture — versions 2018
- Autodesk Autocad Electrical — versions 2018
- Autodesk Autocad Lt — versions 2018
- Autodesk Autocad Map 3d — versions 2018
- Autodesk Autocad Mechanical — versions 2018
- Autodesk Autocad Mep — versions 2018
- Autodesk Autocad P\&id — versions 2018
- Autodesk Autocad Plant 3d — versions 2018
Weakness classification (CWE)
References
- www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001 (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-7359?
- CVE-2019-7359 is a high-severity vulnerability in Autodesk Advance Steel, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2019-04-09.
- How severe is CVE-2019-7359?
- High severity. CVSS v3 base score is 7.8 out of 10.