Autodesk Multiple Products DWG File Processing Arbitrary Code Execution Vulnerability

Bugtraq ID:	61355
Class:	Input Validation Error
CVE:	CVE-2013-3665
Remote:	Yes
Local:	No
Published:	Jul 18 2013 12:00AM
Updated:	Jul 18 2013 12:00AM
Credit:	Joshep J. Cortez Sanchez and Felipe Andres Manzano of Binamuse Vulnerability Research Team
Vulnerable:	Autodesk DWG TrueView 2013 0 Autodesk DWG TrueView 2012 0 Autodesk DWG TrueView 2011 0 Autodesk Autodesk DWG TrueView 2014 0 Autodesk Autodesk AutoCAD Utility Design 2014 0 Autodesk Autodesk AutoCAD Structural Detailing 2014 0 Autodesk Autodesk AutoCAD Plant 3D 2014 0 Autodesk Autodesk AutoCAD P&ID 2014 0 Autodesk Autodesk AutoCAD MEP 2014 0 Autodesk Autodesk AutoCAD Mechanical 2014 0 Autodesk Autodesk AutoCAD Map 3D 2014 0 Autodesk Autodesk AutoCAD LT 2014 0 Autodesk Autodesk AutoCAD Electrical 2014 0 Autodesk Autodesk AutoCAD ecscad 2014 0 Autodesk Autodesk AutoCAD Civil 3D 2014 0 Autodesk Autodesk AutoCAD Architecture 2014 0 Autodesk Autodesk AutoCAD 2014 0 Autodesk AutoCAD Utility Design 2012 R2 Autodesk AutoCAD Structural Detailing 2013 Service Pack 2 Autodesk AutoCAD Structural Detailing 2012 Service Pack 4 Autodesk AutoCAD Structural Detailing 2011 Service Pack 3 Autodesk AutoCAD Plant 3D 2013 Service Pack 2 Autodesk AutoCAD Plant 3D 2012 Service Pack 2 Autodesk AutoCAD Plant 3D 2011 Service Pack 1 Autodesk AutoCAD P&ID 2013 Service Pack 2 Autodesk AutoCAD P&ID 2012 Service Pack 2 Autodesk AutoCAD P&ID 2011 Service Pack 1 Autodesk AutoCAD MEP 2013 Service Pack 2 Autodesk AutoCAD MEP 2012 Service Pack 2 Autodesk AutoCAD MEP 2011 Update 2 Autodesk AutoCAD Mechanical 2013 Service Pack 2 Autodesk AutoCAD Mechanical 2012 Service Pack 2 Autodesk AutoCAD Mechanical 2011 Update 2 Autodesk AutoCAD Map 3D 2013 Service Pack 2 Autodesk AutoCAD Map 3D 2012 Service Pack 2 Autodesk AutoCAD Map 3D 2011 Update 2 Autodesk AutoCAD LT 2013 Service Pack 2 Autodesk AutoCAD LT 2012 Service Pack 2 Autodesk AutoCAD LT 2011 Update 2 Autodesk AutoCAD Electrical 2013 Service Pack 2 Autodesk AutoCAD Electrical 2012 Service Pack 1 Autodesk AutoCAD Electrical 2011 Update 2 Autodesk AutoCAD ecscad 2013 Service Pack 2 Autodesk AutoCAD ecscad 2012 Service Pack 1 Autodesk AutoCAD ecscad 2011 Update 2 Autodesk AutoCAD Civil 3D 2013 Service Pack 2.0 Autodesk AutoCAD Civil 3D 2012 Service Pack 2.1 Autodesk AutoCAD Civil 3D 2011 Update 2 Autodesk AutoCAD Architecture 2013 Service Pack 2 Autodesk AutoCAD Architecture 2012 Service Pack 2 Autodesk AutoCAD Architecture 2011 Update 2 Autodesk AutoCAD 2013 Service Pack 2 Autodesk AutoCAD 2012 Service Pack 2 Autodesk AutoCAD 2011 Update 2
Not Vulnerable:

Autodesk Multiple Products DWG File Processing Arbitrary Code Execution Vulnerability

Autodesk Multiple Products are prone to an arbitrary code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

Autodesk Multiple Products DWG File Processing Arbitrary Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Autodesk Multiple Products DWG File Processing Arbitrary Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Autodesk Multiple Products DWG File Processing Arbitrary Code Execution Vulnerability

References:

• Autodesk AutoCAD Code Execution Vulnerability �?? Security Hotfix Readme (Autodesk )
  
• Autodesk Homepage (Autodesk)