QID 375800

Applications and Services that utilize Autodesk AutoCAD products are affected by Out-of-bound Read, Out-of-bound Write, and Memory Corruption vulnerabilities.

CVE-2021-27040 - A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
CVE-2021-27041 - A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code.
CVE-2021-27042 - A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
CVE-2021-27043 - An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this, the attacker would need the victim to enable full page heap in the application.

Affected Versions:
AutoCAD Versions 2022, 2021, 2020

QID Detection Logic:(Authenticated)
It checks uses registry path HKLM\SYSTEM\CurrentControlSet\Services\AdAppMgrSvc to check the AdAppMgrSvc.exe fileversion.

Successful exploitation of these vulnerabilities could lead to arbitrary code execution.